]> git.ipfire.org Git - thirdparty/glibc.git/blobdiff - ChangeLog
x86-64 memcpy: Properly handle the length parameter [BZ #24097]
[thirdparty/glibc.git] / ChangeLog
index 1ef4b4abe0ada9088c9083ac3861e15a9620a8bc..1751d28bcb445c71aa8f2d19d6d3ae9464c82896 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,225 @@
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/multiarch/memcpy-ssse3-back.S: Use RDX_LP for
+       length.  Clear the upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memcpy-ssse3.S: Likewise.
+       * sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S:
+       Likewise.
+       * sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:
+       Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memcpy.
+       tst-size_t-wmemchr.
+       * sysdeps/x86_64/x32/tst-size_t-memcpy.c: New file.
+
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/multiarch/memcmp-avx2-movbe.S: Use RDX_LP for
+       length.  Clear the upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memcmp-sse4.S: Likewise.
+       * sysdeps/x86_64/multiarch/memcmp-ssse3.S: Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memcmp and
+       tst-size_t-wmemcmp.
+       * sysdeps/x86_64/x32/tst-size_t-memcmp.c: New file.
+       * sysdeps/x86_64/x32/tst-size_t-wmemcmp.c: Likewise.
+
+2019-02-01  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24097]
+       CVE-2019-6488
+       * sysdeps/x86_64/memchr.S: Use RDX_LP for length.  Clear the
+       upper 32 bits of RDX register.
+       * sysdeps/x86_64/multiarch/memchr-avx2.S: Likewise.
+       * sysdeps/x86_64/x32/Makefile (tests): Add tst-size_t-memchr and
+       tst-size_t-wmemchr.
+       * sysdeps/x86_64/x32/test-size_t.h: New file.
+       * sysdeps/x86_64/x32/tst-size_t-memchr.c: Likewise.
+       * sysdeps/x86_64/x32/tst-size_t-wmemchr.c: Likewise.
+
+2019-01-16  Tulio Magno Quites Machado Filho  <tuliom@linux.ibm.com>
+
+       * math/libm-test-fma.inc (fma_test_data): Set
+       XFAIL_ROUNDING_IBM128_LIBGCC to more tests.
+
+2019-01-07  Aurelien Jarno  <aurelien@aurel32.net>
+
+       [BZ #24024]
+       * Makeconfig: Build libm with -fno-math-errno but build the remaining
+       code with -fmath-errno.
+       * string/Makefile [$(build-shared)] (tests): Add test-strerror-errno.
+       [$(build-shared)] (LDLIBS-test-strerror-errno): New variable.
+       * string/test-strerror-errno.c: New file.
+
+2019-01-03  Martin Jansa  <Martin.Jansa@gmail.com>
+
+       [BZ #19444]
+       * sysdeps/ieee754/soft-fp/s_fdiv.c: Include <libc-diag.h> and use
+       DIAG_PUSH_NEEDS_COMMENT, DIAG_IGNORE_NEEDS_COMMENT and
+       DIAG_POP_NEEDS_COMMENT to disable -Wmaybe-uninitialized.
+
+2019-01-02  Aurelien Jarno  <aurelien@aurel32.net>
+
+       [BZ #24034]
+       * sysdeps/unix/sysv/linux/arm/atomic-machine.h
+       (__arm_assisted_compare_and_exchange_val_32_acq): Use uint32_t rather
+       than __typeof (...) for the a_ptr variable.
+
+2018-12-31  H.J. Lu  <hongjiu.lu@intel.com>
+
+       [BZ #24022]
+       * sysdeps/unix/sysv/linux/riscv/flush-icache.c: Check if
+       <asm/syscalls.h> exists with __has_include__ before including it.
+
+2019-01-02  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #24018]
+       * intl/dcigettext.c (DCIGETTEXT): Do not return NULL on asprintf
+       failure.
+
+2018-12-31  Florian Weimer  <fw@deneb.enyo.de>
+
+       [BZ #24027]
+       * malloc/malloc.c (_int_realloc): Always call memcpy for the
+       copying operation.  (ncopies had the wrong type, resulting in an
+       integer wraparound and too few elements being copied.)
+
+2018-12-28  Aurelien Jarno  <aurelien@aurel32.net>
+
+       * sysdeps/alpha/fpu/libm-test-ulps: Regenerated.
+
+2018-12-18  Adhemerval Zanella  <adhemerval.zanella@linaro.org>
+           James Clarke  <jrtc27@jrtc27.com>
+
+       [BZ #23967]
+       * sysdeps/unix/sysv/linux/kernel_sigaction.h (HAS_SA_RESTORER):
+       Define if SA_RESTORER is defined.
+       (kernel_sigaction): Define sa_restorer if HAS_SA_RESTORER is defined.
+       (SET_SA_RESTORER, RESET_SA_RESTORER): Define iff the macro are not
+       already defined.
+       * sysdeps/unix/sysv/linux/m68k/kernel_sigaction.h (SA_RESTORER,
+       kernel_sigaction, SET_SA_RESTORER, RESET_SA_RESTORER): Remove
+       definitions.
+       (HAS_SA_RESTORER): Define.
+       * sysdeps/unix/sysv/linux/sparc/kernel_sigaction.h (SA_RESTORER,
+       SET_SA_RESTORER, RESET_SA_RESTORER): Remove definition.
+       (HAS_SA_RESTORER): Define.
+       * sysdeps/unix/sysv/linux/nios2/kernel_sigaction.h: Include generic
+       kernel_sigaction after define SET_SA_RESTORER and RESET_SA_RESTORER.
+       * sysdeps/unix/sysv/linux/powerpc/kernel_sigaction.h: Likewise.
+       * sysdeps/unix/sysv/linux/s390/kernel_sigaction.h: Likewise.
+       * sysdeps/unix/sysv/linux/x86_64/sigaction.c: Likewise.
+
+2018-10-30  Andreas Schwab  <schwab@suse.de>
+
+       [BZ #23125]
+       * sysdeps/riscv/start.S (ENTRY_POINT): Mark ra as undefined.
+       Don't use tail call.
+       * elf/tst-unwind-main.c: New file.
+       * elf/Makefile (tests): Add tst-unwind-main.
+       (CFLAGS-tst-unwind-main.c): Define.
+
+2018-12-15  Florian Weimer  <fweimer@redhat.com>
+
+       * support/blob_repeat.c (check_mul_overflow_size_t): New function.
+       (minimum_stride_size): Use it.
+       (support_blob_repeat_allocate): Likewise.
+
+2018-12-13  Andreas Schwab  <schwab@suse.de>
+
+       [BZ #23861]
+       * nptl/pthread_rwlock_common.c: Reindent.  Fix typos.
+       (__pthread_rwlock_rdlock_full): Update expected value for
+       __readers while waiting on PTHREAD_RWLOCK_RWAITING.
+       * nptl/tst-rwlock-pwn.c: New file.
+       * nptl/Makefile (tests): Add tst-rwlock-pwn.
+
+2018-12-12  Tulio Magno Quites Machado Filho  <tuliom@linux.ibm.com>
+
+       [BZ #23614]
+       * sysdeps/powerpc/powerpc64/addmul_1.S (FUNC): Add CFI offset for
+       registers saved in the stack frame.
+       * sysdeps/powerpc/powerpc64/lshift.S (__mpn_lshift): Likewise.
+       * sysdeps/powerpc/powerpc64/mul_1.S (__mpn_mul_1): Likewise.
+
+2018-12-07  DJ Delorie  <dj@redhat.com>
+
+       [BZ #23907]
+       * malloc/tst-tcfree3.c: New.
+       * malloc/Makefile: Add it.
+
+2018-12-07  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #23927]
+       CVE-2018-19591
+       * inet/tst-if_index-long.c: New file.
+       * inet/Makefile (tests): Add tst-if_index-long.
+
+2018-12-07  Florian Weimer  <fweimer@redhat.com>
+
+       * support/check.h (support_record_failure_is_failed): Declare.
+       * support/descriptors.h: New file.
+       * support/support_descriptors.c: Likewise.
+       * support/tst-support_descriptors.c: Likewise.
+       * support/support_record_failure.c
+       (support_record_failure_is_failed): New function.
+       * support/Makefile (libsupport-routines): Add support_descriptors.
+       (tests): Add tst-support_descriptors.
+
+2018-12-01  Florian Weimer  <fweimer@redhat.com>
+
+       * support/support_capture_subprocess.c
+       (support_capture_subprocess): Check that pipe descriptors have
+       expected values.  Close original pipe descriptors in subprocess.
+
+2018-11-28  Florian Weimer  <fweimer@redhat.com>
+
+       * support/support.h (support_quote_string): Do not use str
+       parameter name.
+
+2018-11-27  Florian Weimer  <fweimer@redhat.com>
+
+       * support/support.h (support_quote_string): Declare.
+       * support/support_quote_string.c: New file.
+       * support/tst-support_quote_string.c: Likewise.
+       * support/Makefile (libsupport-routines): Add
+       support_quote_string.
+       (tests): Add tst-support_quote_string.
+
+2018-12-10  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #23972]
+       * sysdeps/unix/sysv/linux/getdents64.c (handle_overflow): Check
+       offset instead of count for clarity.  Fix typo in comment.
+       (__old_getdents64): Keep track of previous offset.  Use it to call
+       handle_overflow.
+       * sysdeps/unix/sysv/linux/tst-readdir64-compat.c (do_test): Check
+       that d_off is never zero.
+
+2018-11-30  Tulio Magno Quites Machado Filho  <tuliom@linux.ibm.com>
+
+       [BZ #23690]
+       * elf/dl-runtime.c (_dl_profile_fixup): Guarantee memory
+       modification order when accessing reloc_result->addr.
+       * include/link.h (reloc_result): Add field init.
+       * nptl/Makefile (tests): Add tst-audit-threads.
+       (modules-names): Add tst-audit-threads-mod1 and
+       tst-audit-threads-mod2.
+       Add rules to build tst-audit-threads.
+       * nptl/tst-audit-threads-mod1.c: New file.
+       * nptl/tst-audit-threads-mod2.c: Likewise.
+       * nptl/tst-audit-threads.c: Likewise.
+       * nptl/tst-audit-threads.h: Likewise.
+
+2018-11-26  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #23907]
+       * malloc/malloc.c (_int_free): Validate tc_idx before checking for
+       double-frees.
+
+
 2018-11-20  DJ Delorie  <dj@redhat.com>
 
        * malloc/malloc.c (tcache_entry): Add key field.
        * manual/probes.texi: Document memory_tcache_double_free probe.
 
        * dlfcn/dlerror.c (check_free): Prevent double frees.
+
+2018-11-27  Florian Weimer  <fweimer@redhat.com>
+
+       [BZ #23927]
+       CVE-2018-19591
+       * sysdeps/unix/sysv/linux/if_index.c (__if_nametoindex): Avoid
+       descriptor leak in case of ENODEV error.
+
 2018-11-19  Florian Weimer  <fweimer@redhat.com>
 
        support: Print timestamps in timeout handler.