Bug 473081
Summary: | getaddrinfo SEGV on some nis entries | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Emmanuel Thomé <emmanuel.thome> | ||||
Component: | glibc | Assignee: | Jakub Jelinek <jakub> | ||||
Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
Severity: | high | Docs Contact: | |||||
Priority: | medium | ||||||
Version: | 10 | CC: | jakub | ||||
Target Milestone: | --- | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2008-11-27 13:00:41 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Emmanuel Thomé
2008-11-26 14:39:24 UTC
*** This bug has been marked as a duplicate of bug 473073 *** (In reply to comment #1) > > *** This bug has been marked as a duplicate of 473073 *** Quite possibly. However, notice that bug 473073 does not trigger segfault, which I do get with bug 473081. For 473081, the bug is in parse-list.c in nss/nss_files/files-parse.c ; Buffer overrun on pointer p. I'm probably not the only one working on it at the moment, but I'll come up with a patch later if no one has. E. Created attachment 324892 [details]
this fix works for me.
this fixes the following:
- the struct parser_data in gethostbyname4 was putting stuff on the stack
- an off-by-one in the late memcpy
- as an extra safety net, allow for NIS entries with *many* aliases. I've got one out there with more than 128, which overflows parse_list.
E.
|