]> git.ipfire.org Git - thirdparty/glibc.git/commit
Fix underallocation of abort_msg_s struct (CVE-2025-0395)
authorFlorian Weimer <fweimer@redhat.com>
Wed, 22 Jan 2025 16:22:02 +0000 (17:22 +0100)
committerFlorian Weimer <fweimer@redhat.com>
Wed, 22 Jan 2025 17:31:57 +0000 (18:31 +0100)
commitdf4e1f4a5096b385c9bcc94424cf2eaa227b3761
tree453bcd58533e60ed84d55662a61060cb5a0a2fe5
parent83f223412de7eb6e838a77137fb4459075b475c1
Fix underallocation of abort_msg_s struct (CVE-2025-0395)

Include the space needed to store the length of the message itself, in
addition to the message string.  This resolves BZ #32582.

Signed-off-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
Reviewed: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
(cherry picked from commit 68ee0f704cb81e9ad0a78c644a83e1e9cd2ee578)

Conflict in sysdeps/posix/libc_fatal.c due to missing cleanup after
backtrace removal.
NEWS
assert/assert.c
sysdeps/posix/libc_fatal.c