2
0
mirror of git://sourceware.org/git/glibc.git synced 2025-03-19 13:40:59 +08:00
Florian Weimer bc779a1a5b CVE-2016-4429: sunrpc: Do not use alloca in clntudp_call [BZ ]
The call is technically in a loop, and under certain circumstances
(which are quite difficult to reproduce in a test case), alloca
can be invoked repeatedly during a single call to clntudp_call.
As a result, the available stack space can be exhausted (even
though individual alloca sizes are bounded implicitly by what
can fit into a UDP packet, as a side effect of the earlier
successful send operation).
2016-05-23 20:18:34 +02:00
..