]> git.ipfire.org Git - thirdparty/glibc.git/blobdiff - ChangeLog
CVE-2015-1781: resolv/nss_dns/dns-host.c buffer overflow [BZ#18287]
[thirdparty/glibc.git] / ChangeLog
index 7f05d2e9969d6e71e761ec4f800c1ed52da5667f..26dcfc715c48928d88388d0fcd8929da6a272489 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,202 @@
+2015-04-21  Arjun Shankar  <arjun.is@lostca.se>
+
+       [BZ #18287]
+       * resolv/nss_dns/dns-host.c (getanswer_r): Adjust buffer length
+       based on padding.  (CVE-2015-1781)
+
+2015-04-20  Adhemerval Zanella  <adhemerval.zanella@linaro.org>
+
+       * nptl/pthread_cond_timedwait.c: Change include bits/libc-vdso.h to just
+       libc-vdso.h.
+       * sysdeps/powerpc/powerpc32/backtrace.c: Likewise.
+       * sysdeps/powerpc/powerpc64/backtrace.c: Likewise.
+       * sysdeps/unix/sysv/linux/aarch64/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/clock_getres.c: Likewise.
+       * sysdeps/unix/sysv/linux/clock_gettime.c: Likewise.
+       * sysdeps/unix/sysv/linux/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/get_clockfreq.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/sched_getcpu.c: Likewise.
+       * sysdeps/unix/sysv/linux/powerpc/time.c: Likewise.
+       * sysdeps/unix/sysv/linux/s390/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/tile/gettimeofday.c: Likewise.
+       * sysdeps/unix/sysv/linux/tile/init-first.c: Likewise.
+       * sysdeps/unix/sysv/linux/timespec_get.c: Likewise.
+       * sysdeps/unix/sysv/linux/aarch64/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/aarch64/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/powerpc/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/powerpc/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/s390/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/s390/libc-vdso.h: ... here.
+       * sysdeps/unix/sysv/linux/tile/bits/libc-vdso.h: Move to ...
+       * sysdeps/unix/sysv/linux/tile/libc-vdso.h: ... here.
+
+2015-04-19  Paul Eggert  <eggert@cs.ucla.edu>
+
+       * stdlib/setenv.c (__add_to_environ):
+       Dump core quickly if setenv (..., NULL, ...) is called.
+       This time, do it the right way, and pacify GCC with a pragma.
+
+2015-04-17  Roland McGrath  <roland@hack.frob.com>
+
+       * elf/dl-close.c (_dl_close_worker) [DL_NNS == 1]: Just assert that
+       IMAP->l_prev cannot be null, and #if out the code for the contrary
+       case, avoiding 'assert (nsid != LM_ID_BASE)' making the compiler
+       believe that NS (&_dl_ns[NSID]) could point outside the array.
+
+       * elf/dl-open.c (_dl_open): Use __glibc_unlikely in invalid namespace
+       check.  Reject NSID < 0 and NSID >= dl_nns, and check for DL_NNS==1,
+       before using NSID as an index.
+
+2015-04-17  Il'ya Malakhov <ilmalakhov@yandex.ru>
+
+       [BZ #17825]
+       * sysdeps/sparc/sparc64/memchr.S: Fix signedness handling of length.
+       * sysdeps/sparc/sparc64/memcmp.S: Likewise.
+       * sysdeps/sparc/sparc64/strncmp.S: Likewise.
+
+2015-04-17  Roland McGrath  <roland@hack.frob.com>
+
+       Add preliminary port to Google Native Client on ARM.
+       * abi-tags (.*-.*-nacl.*): New entry.
+       * sysdeps/arm/nacl: New directory.
+       * sysdeps/nacl: New directory.
+
+2015-04-16  David S. Miller  <davem@davemloft.net>
+
+       * sysdeps/unix/sysv/linux/sparc/lowlevellock.h: Make use of
+       lowlevellock-futex.h
+
+2015-04-16  Chris Metcalf  <cmetcalf@ezchip.com>
+
+       * sysdeps/tile/configure.ac: New file.
+       * sysdeps/tile/configure: Regenerated.
+
+2015-04-15  Adhemerval Zanella  <adhemerval.zanella@linaro.org>
+
+       * wcsmbs/wcschr.c [WCSCHR] (wcschr): Define as __wcschr.  Remove
+       conditionals for weak_alias and libc_hidden_weak.
+       * sysdeps/i386/i686/multiarch/wcschr-c.c [libc]: Undefine
+       libc_hidden_weak and weak_alias.
+       * sysdeps/powerpc/powerpc32/power4/multiarch/wcschr-ppc32.c [libc]:
+       Undefine libc_hidden_weak. Define libc_hidden_def for SHARED builds
+       and weak_alias for static one.
+
+2015-04-15  David S. Miller  <davem@davemloft.net>
+
+       * sysdeps/sparc/fpu/libm-test-ulps: Regenerate from scratch.
+
+2015-04-13  Stefan Liebler  <stli@linux.vnet.ibm.com>
+
+       [BZ #18206]
+       * wcsmbs/wcsncmp.c (wcsncmp): Compare as wchar_t, not wint_t.
+         Use signed comparision instead of substraction to avoid
+         overflow bug.
+       * localedata/tests-mbwc/tst_wcsncmp.c (tst_wcsncmp):
+         Take the sign of ret.
+       * localedata/tests-mbwc/dat_wcsncmp.c (tst_wcsncmp_loc):
+         Do not expect precise return values. Only the sign matters.
+       * wcsmbs/Makefile (strop-tests): Add wcsncmp.
+       * wcsmbs/test-wcsncmp.c: New File.
+       * string/test-strncmp.c: Add wcsncmp support.
+
+2015-04-13  Stefan Liebler  <stli@linux.vnet.ibm.com>
+
+       [BZ #6792]
+       * math/w_log1p.c: New file.
+       * math/w_log1pf.c: Likewise.
+       * math/w_log1pl.c: Likewise.
+       * math/Makefile (libm-calls): Add w_log1p.
+       * math/s_log1pl.c (log1pl): Remove weak_alias.
+       * sysdeps/i386/fpu/s_log1p.S (log1p): Likewise.
+       * sysdeps/i386/fpu/s_log1pf.S (log1pf): Likewise.
+       * sysdeps/i386/fpu/s_log1pl.S (log1pl): Likewise.
+       * sysdeps/x86_64/fpu/s_log1pl.S (log1pl): Likewise.
+       * sysdeps/ieee754/dbl-64/s_log1p.c (log1p): Likewise.
+       [NO_LONG_DOUBLE] (log1pl): Likewise.
+       * sysdeps/ieee754/flt-32/s_log1pf.c (log1pf): Likewise.
+       * sysdeps/ieee754/ldbl-128/s_log1pl.c (log1pl): Likewise.
+       * sysdeps/ieee754/ldbl-64-128/s_log1pl.c
+       (log1p): Remove long_double_symbol.
+       * sysdeps/ieee754/ldbl-128ibm/s_log1pl.c (log1pl): Likewise.
+       * sysdeps/ieee754/ldbl-64-128/w_log1pl.c: New file.
+       * sysdeps/ieee754/ldbl-128ibm/w_log1pl.c: Likewise.
+       * sysdeps/m68k/m680x0/fpu/s_log1p.c: Define empty weak_alias to
+       remove weak_alias for corresponding log1p function.
+       * sysdeps/m68k/m680x0/fpu/s_log1pf.c: Likewise.
+       * sysdeps/m68k/m680x0/fpu/s_log1pl.c: Likewise.
+       * sysdeps/ia64/fpu/w_log1p.c: New file.
+       * sysdeps/ia64/fpu/w_log1pf.c: Likewise.
+       * sysdeps/ia64/fpu/w_log1pl.c: Likewise.
+       * math/libm-test.inc (log1p_test_data): Add errno expectations.
+
+2015-04-10  Joseph Myers  <joseph@codesourcery.com>
+
+       [BZ #18247]
+       * stdlib/strtod_l.c (____STRTOF_INTERNAL): Decrease minimum
+       decimal exponent by 1.
+       * stdlib/tst-strtod-round-data: Add more tests.
+       * stdlib/tst-strtod-round.c (tests): Regenerated.
+
+2015-04-09  Joseph Myers  <joseph@codesourcery.com>
+
+       * math/auto-libm-test-in: Add more tests of clog and clog10.
+       * math/auto-libm-test-out: Regenerated.
+       * sysdeps/i386/fpu/libm-test-ulps: Update.
+       * sysdeps/x86_64/fpu/libm-test-ulps: Likewise.
+
+2015-04-09  Roland McGrath  <roland@hack.frob.com>
+
+       * Makeconfig (module-cppflags): Exclude all .v.i files.
+       (skip-module-cppflags): Variable removed.
+
+       * configure.ac (libc_config_ok): Initialize before reading
+       preconfigure scripts, not after.
+       * configure: Regenerated.
+
+       * test-skeleton.c (TIMEOUT): Move #define to top level.
+       (main): Grok environment variable TEST_DIRECT.  If set, print
+       test expectation details into that file and then behave as if
+       given --direct.
+
+2015-04-09  Florian Weimer  <fweimer@redhat.com>
+
+       * malloc/tst-scratch_buffer.c (do_test): Suppress truncation
+       warning on 32-bit.
+
+2015-04-08  David S. Miller  <davem@davemloft.net>
+
+       * sysdeps/sparc/fpu/libm-test-ulps: Update.
+
+2015-04-08  Joseph Myers  <joseph@codesourcery.com>
+
+       * math/auto-libm-test-in: Add more tests of atanh.
+       * math/auto-libm-test-out: Regenerated.
+       * sysdeps/i386/fpu/libm-test-ulps: Update.
+       * sysdeps/x86_64/fpu/libm-test-ulps: Likewise.
+
+       * math/auto-libm-test-in: Add more tests of atan.
+       * math/auto-libm-test-out: Regenerated.
+       * sysdeps/i386/fpu/libm-test-ulps: Update.
+       * sysdeps/x86_64/fpu/libm-test-ulps: Likewise.
+
+2015-04-08  Florian Weimer  <fweimer@redhat.com>
+
+       * elf/pldd.c (main): Rewrite to use struct
+       scratch_buffer instead of extend_alloca.
+       * elf/pldd-xx.c (find_maps): Likewise.
+       * grp/initgroups.c: Include <scratch_buffer.h> instead of
+       <alloca.h>.
+       * grp/compat-initgroups.c (compat_call): Rewrite to use struct
+       scratch_buffer instead of extend_alloca.
+       * nscd/initgrcache.c: Include <scratch_buffer.h>, now needed by
+       grp/compat-initgroups.c.
+       * nis/nss_compat/compat-initgroups.c (_nss_compat_initgroups_dyn):
+       Rewrite to use struct scratch_buffer instead of extend_alloca.
+       * inet/getnameinfo.c (nrl_domainname, getnameinfo): Likewise.
+       * nscd/nscd_getgr_r.c (nscd_getgr_r): Likewise.
+
 2015-04-08  Joseph Myers  <joseph@codesourcery.com>
 
        * math/auto-libm-test-in: Add more tests of cbrt.