Commit Graph

27035 Commits

Author SHA1 Message Date
Stan Shebs
9277192e15 Forestall a filesystem bug while building shlib.lds by using a temp file 2019-08-14 10:20:07 -07:00
Joseph Myers
353f79819c Fix nan functions handling of payload strings (BZ16962, CVE-2014-9761) 2017-01-19 14:01:46 -08:00
Andreas Schwab
e1c67173bf Missing unwind info in __startcontext causes infinite loop (BZ20435, CVE-2016-6323) 2017-01-18 12:56:41 -08:00
Paul Pluzhnikov
d701c3a0a5 Fix catopen() Multiple unbounded stack allocations (BZ17905, CVE-2015-8779) 2017-01-18 12:28:50 -08:00
Stan Shebs
19d0f70b08 hcreate, hcreate_r should fail with ENOMEM if element count is too large (BZ18240, CVE-2015-8778) 2017-01-18 07:46:22 -08:00
Stan Shebs
b95393ecb5 Always enable pointer guard 2017-01-18 07:43:43 -08:00
Stan Shebs
79ab0fcfda Fix where out of range data to strftime() causes a segfault (BZ18985, CVE-2015-8776) 2017-01-12 21:07:13 -08:00
Stan Shebs
882f407875 Make GRTE testing great again, actually run the test programs 2017-01-12 12:54:46 -08:00
Stan Shebs
a998069c80 Don't read past end of pattern in fnmatch (BZ17062) 2017-01-10 18:44:57 -08:00
Stan Shebs
85ea40f66d Don't ignore too long lines in nss_files (BZ17079, CVE-2015-5277) Tested: 2016-12-28 13:51:37 -08:00
Stan Shebs
b6099fb5b2 Handle a not-found case in borg passwd lookup 2016-11-03 16:31:52 -07:00
Michael Rothwell
929275c193 Call the correct function. 2016-09-30 09:46:48 -07:00
Michael Rothwell
ad9d6e1dbe Augment borg-pwd to also search through passwd.borg.base, if it exists. 2016-09-30 06:09:04 -07:00
Stan Shebs
74b27c48cb Revert the fix to the value of DT_PPC64_NUM. 2016-09-29 12:10:48 -07:00
Stan Shebs
f01f990def Fix error handling in getaddrinfo. 2016-08-05 14:12:59 -07:00
Stan Shebs
c0872d83ef Fix stack overflow in hostent translation (CVE-2016-3706) 2016-07-14 11:12:46 -07:00
Max Kanat-Alexander
30bb510293 Update nss_cache.c and nss_cache.h to current upstream version. This makes getgrgid_r and similar calls over 20x faster on corp machines. 2016-07-06 14:47:51 -07:00
Stan Shebs
bdf9cbb2db Backport checking of locale environment handling 2016-06-27 09:36:28 -07:00
Stan Shebs
a39e9f7a23 fix where getaddrinfo() writes DNS queries to random file descriptors under high load (BZ15946, CVE-2013-7423) 2016-05-09 13:54:38 -07:00
Stan Shebs
a48e32ee70 Fix stack overflow in _nss_dns_getnetbyname_r (BZ19879) 2016-05-09 10:29:27 -07:00
Stan Shebs
c93632edca Fix infinite loop on process exit. 2016-04-27 09:53:33 -07:00
Stan Shebs
000f2cf415 Remove uses of operand modifier (%s) in powerpc inline asm. 2016-02-16 13:39:03 -08:00
Stan Shebs
409bde58fe Backport several dozen PPC-specific patches from IBM. 2016-02-12 18:29:41 -08:00
Stan Shebs
74df977401 Small fix to patch from last October, lets tst-key5 build. 2016-02-10 14:55:24 -08:00
Vicent Segui Pascual
bab244a006 Use munlock before madvise to make sure that we effectively "uncommit" the page 2016-01-18 02:05:31 -08:00
Brooks Moses
fa9a6cbaea For b/25900273, adjust allocations to avoid segfault. 2015-12-15 10:57:38 -08:00
Stan Shebs
587c53b344 Backport removal of __gconv_translit_find 2015-12-03 14:18:23 -08:00
Stan Shebs
f495bb0484 Backport fix for broken trig functions 2015-12-01 09:52:57 -08:00
Manuel Klimek
0428bae673 Allow suppressing the definition of __USE_FILE_OFFSET64 by defining SUPPRESS_USE_FILE_OFFSET64 in the CROSSTOOL. 2015-10-29 10:29:55 -07:00
Stan Shebs
2387d2fc7c Backport of fix for memory leak in getaddrinfo() 2015-10-15 09:22:35 -07:00
Andrew Hunter
497c190870 Make pthread_getspecific async-signal-safe 2015-10-13 10:39:00 -07:00
Paul Pluzhnikov
14cfc78089 For b/22641205, #include _itoa.h 2015-10-10 09:26:54 -07:00
Paul Pluzhnikov
bbffc56aa5 For b/20141439, don't add "foo.so" as alternate name for previously loaded "foo.so/@0x..." 2015-10-02 07:31:16 -07:00
Stan Shebs
107aed9f2b Backport upstream fix to nss_files 2015-09-16 10:29:39 -07:00
Stan Shebs
b1342139cd Backport upstream fixes to fnmatch 2015-08-31 13:22:13 -07:00
Stan Shebs
db2523b0da Describe borg-pwd better, remove dead code. 2015-08-21 14:50:53 -07:00
Brooks Moses
5ccef4d197 Add README.google description omitted from cl/100732637. 2015-08-18 18:07:15 -07:00
Stan Shebs
4be23b8484 Backport fix for BZ 18287 (CVE-2015-1781) 2015-08-17 14:39:38 -07:00
Brooks Moses
e52611a110 Backport cl/98967227 to GRTE glibc 2.19 sources. 2015-08-14 22:32:51 -07:00
Stan Shebs
b2b6bfcde6 Fix b/19824366 with a local patch (as upstream is fixed unmergeably), and add a new test. 2015-07-28 10:17:46 -07:00
Sriraman Tallam
3532d2e2bc Redeclare hot external libc functions with new GCC function attribute "noplt" to allow calls to these functions to avoid the PLT. This change improves 2015-07-27 10:14:19 -07:00
Stan Shebs
d1c2791a63 backport fix buffer overflow for writes to memory buffer stream (PR18549) 2015-07-06 20:51:10 -07:00
Andrew Hunter
1153d5eaf4 Prevent wasted memory in guard regions 2015-06-23 12:58:32 -07:00
Paul Pluzhnikov
10d353539f For b/8315591, b/20141439 correct off-by-one error that resulted in last byte of l_name being random garbage. 2015-06-03 08:58:35 -07:00
Nick Lewycky
e19fc0ea57 Change this offsetof computation to use c89 offsetof. Tested: 2015-04-16 11:15:58 -07:00
Stan Shebs
2963bd873f Backport fix for wscanf Tested: 2015-03-13 15:29:01 -07:00
Stan Shebs
d37331c9ef Backport fix for getnetbyname Tested: 2015-02-05 19:48:08 -08:00
Brooks Moses
daee27e94c Port "resolv.conf timestamp checks" fixes from eglibc sources. 2015-01-30 14:01:03 -08:00
Paul Pluzhnikov
1d1e0535b6 For b/18243822, add back code that was accidentally deleted at the last minute in cr/80600560, and which is required to actually make 2014-12-04 13:56:47 -08:00
Sterling Augustine
13e6e91707 Use ENTRY and END macros to get a .size directive. backport of change: 2014-11-25 14:49:54 -08:00