]> git.ipfire.org Git - thirdparty/glibc.git/commit
CVE-2016-1234: glob: Do not copy d_name field of struct dirent [BZ #19779]
authorFlorian Weimer <fweimer@redhat.com>
Wed, 4 May 2016 10:09:35 +0000 (12:09 +0200)
committerGabriel F. T. Gomes <gftg@linux.vnet.ibm.com>
Tue, 24 May 2016 14:36:20 +0000 (11:36 -0300)
commit3822125d1c520d5bb5e33cd9254a902d52d4eb19
treeca8d9d03e047c1507b052ca19eea08076f5d5e6b
parent75cf90eb20d98270ea3903baefb75647ae61fd3f
CVE-2016-1234: glob: Do not copy d_name field of struct dirent [BZ #19779]

Instead, we store the data we need from the return value of
readdir in an object of the new type struct readdir_result.
This type is independent of the layout of struct dirent.

(cherry picked from commit 5171f3079f2cc53e0548fc4967361f4d1ce9d7ea)
ChangeLog
NEWS
posix/bug-glob2.c
posix/glob.c
sysdeps/unix/sysv/linux/i386/glob64.c