glibc/nscd
Florian Weimer b674246369 CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
This avoids potential memory corruption when the underlying NSS
callback function does not use the buffer space to store all strings
(e.g., for constant strings).

Instead of custom buffer management, two scratch buffers are used.
This increases stack usage somewhat.

Scratch buffer allocation failure is handled by return -1
(an invalid timeout value) instead of terminating the process.
This fixes bug 31679.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit c04a21e050)
2024-04-25 15:42:42 +02:00
..
aicache.c nscd: Drop local address tuple variable [BZ #29607] 2022-10-04 18:43:50 -04:00
cache.c
cachedumper.c
connections.c nscd: Fix netlink cache invalidation if epoll is used [BZ #29415] 2022-09-06 18:34:18 +02:00
dbg_log.c
dbg_log.h
Depend
gai.c
getgrgid_r.c
getgrnam_r.c
gethstbyad_r.c
gethstbynm3_r.c
getpwnam_r.c
getpwuid_r.c
getsrvbynm_r.c
getsrvbypt_r.c
grpcache.c
hstcache.c
initgrcache.c
Makefile
mem.c
netgroupcache.c CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680) 2024-04-25 15:42:42 +02:00
nscd_conf.c
nscd_getai.c
nscd_getgr_r.c
nscd_gethst_r.c nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402) 2022-12-28 17:26:22 -03:00
nscd_getpw_r.c
nscd_getserv_r.c
nscd_helper.c
nscd_initgroups.c
nscd_netgroup.c
nscd_proto.h
nscd_setup_thread.c
nscd_stat.c
nscd-client.h
nscd.c
nscd.conf
nscd.h nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402) 2022-12-28 17:26:22 -03:00
nscd.init
nscd.service
nscd.tmpfiles
pwdcache.c
res_hconf.c
selinux.c
selinux.h
servicescache.c