diff options
| author | Siddhesh Poyarekar <siddhesh@sourceware.org> | 2017-06-20 05:59:17 +0200 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2017-06-20 05:59:17 +0200 |
| commit | 3776f38fcd267c127ba5eb222e2c614c191744aa (patch) | |
| tree | 7d196b5415bd1cb87860ce5defd3bffa36b2573d /NEWS | |
| parent | c69d4a0f680a24fdbe323764a50382ad324041e9 (diff) | |
| download | glibc-3776f38fcd267c127ba5eb222e2c614c191744aa.zip glibc-3776f38fcd267c127ba5eb222e2c614c191744aa.tar.gz glibc-3776f38fcd267c127ba5eb222e2c614c191744aa.tar.bz2 | |
Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (bug #21209)
The LD_HWCAP_MASK environment variable may alter the selection of
function variants for some architectures. For AT_SECURE process it
means that if an outdated routine has a bug that would otherwise not
affect newer platforms by default, LD_HWCAP_MASK will allow that bug
to be exploited.
To be on the safe side, ignore and disable LD_HWCAP_MASK for setuid
binaries.
[BZ #21209]
* elf/rtld.c (process_envvars): Ignore LD_HWCAP_MASK for
AT_SECURE processes.
* sysdeps/generic/unsecvars.h: Add LD_HWCAP_MASK.
* elf/tst-env-setuid.c (test_parent): Test LD_HWCAP_MASK.
(test_child): Likewise.
* elf/Makefile (tst-env-setuid-ENV): Add LD_HWCAP_MASK.
(cherry picked from commit 1c1243b6fc33c029488add276e56570a07803bfd)
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -13,6 +13,7 @@ The following bugs are resolved with this release: [21015] Document and fix --enable-bind-now [21109] Tunables broken on big-endian [21115] sunrpc: Use-after-free in error path in clntudp_call + [21209] Ignore and remove LD_HWCAP_MASK for AT_SECURE programs [21289] Fix symbol redirect for fts_set [21386] Assertion in fork for distinct parent PID is incorrect [21624] Unsafe alloca allows local attackers to alias stack and heap (CVE-2017-1000366) |