mirror/glibc
2
0
Fork 0
mirror of git://sourceware.org/git/glibc.git synced 2025-02-23 13:09:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

Missing unwind info in __startcontext causes infinite loop (BZ20435, CVE-2016-6323)

Browse Source
This commit is contained in:
Andreas Schwab 2017-01-18 12:56:41 -08:00 committed by Stan Shebs
parent d701c3a0a5
commit e1c67173bf
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
README.google
View File

@ -657,3 +657,8 @@ catgets/tst-catgets.c
Fix catopen() Multiple unbounded stack allocations (BZ17905, CVE-2015-8779)
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0f58539030e436449f79189b6edab17d7479796e
(stanshebs, backport)
ports/sysdeps/unix/sysv/linux/arm/setcontext.S
Missing unwind info in __startcontext causes infinite loop (BZ20435, CVE-2016-6323)
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=9e2ff6c9cc54c0b4402b8d49e4abe7000fde7617
(stanshebs, backport)

7
ports/sysdeps/unix/sysv/linux/arm/setcontext.S
View File

@ -86,12 +86,19 @@ weak_alias(__setcontext, setcontext)
/* Called when a makecontext() context returns. Start the
context in R4 or fall through to exit(). */
/* Unwind descriptors are looked up based on PC - 2, so we have to
make sure to mark the instruction preceding the __startcontext
label as .cantunwind. */
.fnstart
.cantunwind
nop
ENTRY(__startcontext)
movs r0, r4
bne PLTJMP(__setcontext)
@ New context was 0 - exit
b PLTJMP(HIDDEN_JUMPTARGET(_exit))
.fnend
END(__startcontext)
#ifdef PIC