wok-4.x view glibc/stuff/patches/glibc-2.22-CVE-2017-15670.patch @ rev 12476

Up glibc (2.22) with CVE patchs
author Stanislas Leduc <shann@slitaz.org>
date Wed Mar 15 11:41:38 2023 +0000 (14 months ago)
parents
children
line source
1 Based on:
2
3 From c369d66e5426a30e4725b100d5cd28e372754f90 Mon Sep 17 00:00:00 2001
4 From: Paul Eggert <eggert@cs.ucla.edu>
5 Date: Fri, 20 Oct 2017 18:41:14 +0200
6 Subject: [PATCH] CVE-2017-15670: glob: Fix one-byte overflow [BZ #22320]
7
8 diff -Naur a/posix/glob.c b/posix/glob.c
9 --- a/posix/glob.c 2017-11-02 15:37:04.841879958 +0530
10 +++ b/posix/glob.c 2017-11-02 15:37:28.866595784 +0530
11 @@ -868,7 +868,7 @@
12 *p = '\0';
13 }
14 else
15 - *((char *) mempcpy (newp, dirname + 1, end_name - dirname))
16 + *((char *) mempcpy (newp, dirname + 1, end_name - dirname - 1))
17 = '\0';
18 user_name = newp;
19 }