This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]

From: Siddhesh Poyarekar <siddhesh at redhat dot com>
To: Florian Weimer <fweimer at redhat dot com>
Cc: libc-alpha at sourceware dot org
Date: Wed, 25 Mar 2015 11:17:35 +0530
Subject: Re: [PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]
Authentication-results: sourceware.org; auth=none
References: <54EB120A dot 1010202 at redhat dot com> <5506F010 dot 1090608 at redhat dot com>

On Mon, Mar 16, 2015 at 04:00:32PM +0100, Florian Weimer wrote:
> On 02/23/2015 12:42 PM, Florian Weimer wrote:
> > Robin Hack discovered that Samba would enter an infinite loop when
> > processing quota-related requests.  It turns out this is a bug in the
> > nss_files database.  Performing a lookup in the middle of an iteration
> > (say, getwuid between getpwent) effectively resets the file pointer, so
> > that the iteration starts again from the beginning.
> > 
> > Tested on x86_64-redhat-linux-gnu.  Okay to commit?
> 
> Ping?
> 
> Can we at least fix the most common instance of this bug?

I agree.  Patch looks good to me.

Siddhesh

Attachment: pgpsjakQXZ7Vk.pgp
Description: PGP signature

References:
- Re: [PATCH] CVE-2014-8121: Fix nss_files file management [BZ#18007]
  - From: Florian Weimer

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]