diff options
| author | Florian Weimer <fweimer@redhat.com> | 2016-04-29 10:35:34 +0200 |
|---|---|---|
| committer | Aurelien Jarno <aurelien@aurel32.net> | 2016-05-12 17:33:52 +0200 |
| commit | 762aafec34478bcef01a16acf1959732ab8bb2b6 (patch) | |
| tree | 9bae52e21faca02a08e00d4172e2b9452ec7758e /sysdeps/unix/system.c | |
| parent | e97fb84811238c627f93e5e703a11eb841601947 (diff) | |
| download | glibc-762aafec34478bcef01a16acf1959732ab8bb2b6.zip glibc-762aafec34478bcef01a16acf1959732ab8bb2b6.tar.gz glibc-762aafec34478bcef01a16acf1959732ab8bb2b6.tar.bz2 | |
CVE-2016-3706: getaddrinfo: stack overflow in hostent conversion [BZ #20010]
When converting a struct hostent response to struct gaih_addrtuple, the
gethosts macro (which is called from gaih_inet) used alloca, without
malloc fallback for large responses. This commit changes this code to
use calloc unconditionally.
This commit also consolidated a second hostent-to-gaih_addrtuple
conversion loop (in gaih_inet) to use the new conversion function.
(cherry picked from commit 4ab2ab03d4351914ee53248dc5aef4a8c88ff8b9)
Diffstat (limited to 'sysdeps/unix/system.c')
0 files changed, 0 insertions, 0 deletions