diff options
| author | Maninder Singh <maninder1.s@samsung.com> | 2018-01-10 15:17:30 +0000 |
|---|---|---|
| committer | Szabolcs Nagy <szabolcs.nagy@arm.com> | 2021-02-15 11:49:15 +0000 |
| commit | 3721784a79c9d2040297304b2a7216d7072ea838 (patch) | |
| tree | 459fb973dc4f42660b19a2eacdfd30aa7355fce9 /README | |
| parent | 90458da8b7b46e806f756c2715c87fc9d2c1be95 (diff) | |
| download | glibc-3721784a79c9d2040297304b2a7216d7072ea838.zip glibc-3721784a79c9d2040297304b2a7216d7072ea838.tar.gz glibc-3721784a79c9d2040297304b2a7216d7072ea838.tar.bz2 | |
elf: Fix data race in _dl_name_match_p [BZ #21349]
dlopen updates libname_list by writing to lastp->next, but concurrent
reads in _dl_name_match_p were not synchronized when it was called
without holding GL(dl_load_lock), which can happen during lazy symbol
resolution.
This patch fixes the race between _dl_name_match_p reading lastp->next
and add_name_to_object writing to it. This could cause segfault on
targets with weak memory order when lastp->next->name is read, which
was observed on an arm system. Fixes bug 21349.
(Code is from Maninder Singh, comments and description is from Szabolcs
Nagy.)
Co-authored-by: Szabolcs Nagy <szabolcs.nagy@arm.com>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions