glibc/stdio-common
Eric Biggers 3d110c7c6e Fix fwrite() reading beyond end of buffer in error path
Partially revert commits 2b766585f9 and
de2fd463b1, which were intended to fix BZ#11741
but caused another, likely worse bug, namely that fwrite() and fputs() could,
in an error path, read data beyond the end of the specified buffer, and
potentially even write this data to the file.

Fix BZ#11741 properly by checking the return value from _IO_padn() in
stdio-common/vfprintf.c.
2013-10-11 22:29:38 +05:30
..
bits Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
_i18n_number.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
_itoa.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
_itowa.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
_itowa.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
asprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
bug1.c
bug1.input
bug2.c
bug3.c
bug4.c
bug5.c
bug6.c
bug6.input
bug7.c
bug8.c
bug9.c
bug10.c
bug11.c
bug12.c
bug13.c
bug14.c
bug16.c Remove trailing whitespace. 2013-06-05 20:44:03 +00:00
bug17.c [BZ #3902] 2007-01-22 16:18:03 +00:00
bug18.c * libio/wstrops.c (_IO_wstr_underflow): Clear errno before 2007-07-07 21:38:43 +00:00
bug18a.c * libio/wstrops.c (_IO_wstr_underflow): Clear errno before 2007-07-07 21:38:43 +00:00
bug19.c * stdio-common/vfscanf.c (_IO_vfscanf): Add additional test for EOF 2007-07-08 04:41:34 +00:00
bug19a.c * stdio-common/vfscanf.c (_IO_vfscanf): Add additional test for EOF 2007-07-08 04:41:34 +00:00
bug20.c * stdio-common/Makefile (tests): Add bug20. 2007-10-28 16:45:27 +00:00
bug21.c [BZ #5441, BZ #5452, BZ #5454] 2007-12-07 16:50:11 +00:00
bug22.c Bump up stdio bug22 timeout from 30 seconds to 60 seconds 2012-05-17 12:59:08 -04:00
bug23.c Fix allocation when handling positional parameters in printf. 2011-02-20 07:59:49 -05:00
bug24.c Add test for BZ 13114 2011-08-20 09:22:16 -04:00
bug25.c 2012-05-24 Jeff Law <law@redhat.com> 2012-05-24 21:30:43 -06:00
bug26.c * stdio-common/bug26.c (main): Correct fscanf template. 2013-05-26 21:59:24 +02:00
bug-vfprintf-nargs.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
ctermid.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
cuserid.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
Depend
dprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
errlist.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
errnobug.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
flockfile.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
fprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
fscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
ftrylockfile.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
funlockfile.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
fxprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getline.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getw.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_fscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_scanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_sscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_vfscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_vscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
isoc99_vsscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
itoa-digits.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
itoa-udigits.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
itowa-digits.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
Makefile Don't accept exp char without preceding digits in scanf float parsing 2013-04-11 10:24:37 +02:00
perror.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
printf_fp.c PowerPC floating point little-endian [1 of 15] 2013-10-04 10:31:41 +09:30
printf_fphex.c PowerPC floating point little-endian [1 of 15] 2013-10-04 10:31:41 +09:30
printf_size.c PowerPC floating point little-endian [1 of 15] 2013-10-04 10:31:41 +09:30
printf-parse.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
printf-parsemb.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
printf-parsewc.c
printf-prs.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
printf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
printf.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
psiginfo-data.h * locale/langinfo.h: nl_langinfo_l is in POSIX 2008. 2009-02-26 06:18:24 +00:00
psiginfo-define.h * locale/langinfo.h: nl_langinfo_l is in POSIX 2008. 2009-02-26 06:18:24 +00:00
psiginfo.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
psignal.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
putw.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
reg-modifier.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
reg-printf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
reg-type.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
remove.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
rename.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
renameat.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
scanf1.c
scanf2.c
scanf3.c
scanf4.c
scanf5.c
scanf7.c
scanf8.c
scanf9.c
scanf10.c
scanf11.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
scanf12.c
scanf12.input
scanf13.c Avoid warning in scanf test. 2009-10-30 09:23:24 -07:00
scanf14.c * libio/stdio.h (vscanf): Fix -std=c99 redirect. 2008-05-24 18:14:36 +00:00
scanf15.c Preserve SSE registers in runtime relocations on x86-64. 2009-07-29 08:33:03 -07:00
scanf16.c * libio/stdio.h (vscanf): Fix -std=c99 redirect. 2008-05-24 18:14:36 +00:00
scanf17.c Preserve SSE registers in runtime relocations on x86-64. 2009-07-29 08:33:03 -07:00
scanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
siglist.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
snprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
sprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
sscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
stdio_ext.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
stdio_lim.h.in Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tempnam.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tempname.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
temptest.c
test_rdwr.c Avoid use of "register" as optimization hint. 2013-06-07 22:24:35 +00:00
test-fseek.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
test-fwrite.c
test-popen.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
test-vfprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tfformat.c Avoid use of "register" as optimization hint. 2013-06-07 22:24:35 +00:00
tiformat.c
tllformat.c
tmpfile64.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tmpfile.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tmpnam_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tmpnam.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-cookie.c
tst-fdopen.c
tst-ferror.c
tst-ferror.input
tst-fgets.c
tst-fileno.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-fmemopen2.c * stdlib/tst-strtod2.c (do_test): Use %tu in fmt string for ptrdiff_t 2007-08-01 03:44:35 +00:00
tst-fmemopen.c Remove a spurious const in tst-fmemopen. 2012-02-27 13:29:12 -08:00
tst-fphex-wide.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-fphex.c Clean up tst-fphex test 2012-03-08 03:02:24 -05:00
tst-fseek.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-fwrite.c
tst-gets.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-gets.input
tst-grouping.c Fix grouping when rounding increases number of integer digits. 2011-01-12 20:37:51 -05:00
tst-long-dbl-fphex.c Fix tst-long-dbl-fphex swprintf length calculation. 2013-09-24 16:12:12 -07:00
tst-obprintf.c
tst-perror.c
tst-popen2.c * libio/iopopen.c (_IO_new_proc_open): Don't close child_std_end 2007-07-19 17:03:08 +00:00
tst-popen.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-printf-round.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-printf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-printf.sh Add --enable-hardcoded-path-in-tests configure option 2013-01-11 07:14:18 -08:00
tst-printfsz.c
tst-put-error.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-rndseek.c
tst-setvbuf1.c * stdio-common/Makefile: Add rules to build and run tst-setvbuf1. 2008-07-08 16:32:55 +00:00
tst-setvbuf1.expect * stdio-common/Makefile: Add rules to build and run tst-setvbuf1. 2008-07-08 16:32:55 +00:00
tst-sprintf2.c * nss/nsswitch.c (__nss_lookup_function): Don't cast &ni->known to 2007-07-28 20:36:21 +00:00
tst-sprintf3.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-sprintf.c 2012-09-28 Andreas Schwab <schwab@linux-m68k.org> 2012-09-28 12:49:51 -06:00
tst-sscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-swprintf.c
tst-swscanf.c * stdio-common/Makefile (tests): Add tst-swscanf. 2007-02-18 09:21:24 +00:00
tst-tmpnam.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-unbputc.c
tst-unbputc.sh Add --enable-hardcoded-path-in-tests configure option 2013-01-11 07:14:18 -08:00
tst-ungetc.c
tst-unlockedio.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-wc-printf.c
tstdiomisc.c Fix coding-style violation. 2013-04-15 22:11:30 +02:00
tstgetln.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tstgetln.input
tstscanf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tstscanf.input
Versions * stdio-common/printf.h (struct printf_info): Add user element. 2009-04-11 05:34:20 +00:00
vfprintf.c Fix fwrite() reading beyond end of buffer in error path 2013-10-11 22:29:38 +05:30
vfscanf.c Fix typos. 2013-08-30 18:08:59 +02:00
vfwprintf.c
vfwscanf.c
vprintf.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
xbug.c Avoid use of "register" as optimization hint. 2013-06-07 22:24:35 +00:00