glibc/nscd
Florian Weimer c04a21e050 CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
This avoids potential memory corruption when the underlying NSS
callback function does not use the buffer space to store all strings
(e.g., for constant strings).

Instead of custom buffer management, two scratch buffers are used.
This increases stack usage somewhat.

Scratch buffer allocation failure is handled by return -1
(an invalid timeout value) instead of terminating the process.
This fixes bug 31679.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
2024-04-25 15:01:07 +02:00
..
aicache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cachedumper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
connections.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Depend
getgrgid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getgrnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbyad_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbynm3_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwuid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbynm_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbypt_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
grpcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
hstcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
initgrcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Makefile Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
mem.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
netgroupcache.c CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680) 2024-04-25 15:01:07 +02:00
nscd_conf.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getai.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getgr_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_gethst_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getpw_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getserv_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_helper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_initgroups.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_netgroup.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_proto.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_setup_thread.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_stat.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd-client.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.c Update copyright dates not handled by scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.conf
nscd.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.init
nscd.service
nscd.tmpfiles
pwdcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
res_hconf.c
selinux.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
selinux.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
servicescache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00