Go to file
Arjun Shankar 68507377f2 socket: Check lengths before advancing pointer in CMSG_NXTHDR
The inline and library functions that the CMSG_NXTHDR macro may expand
to increment the pointer to the header before checking the stride of
the increment against available space.  Since C only allows incrementing
pointers to one past the end of an array, the increment must be done
after a length check.  This commit fixes that and includes a regression
test for CMSG_FIRSTHDR and CMSG_NXTHDR.

The Linux, Hurd, and generic headers are all changed.

Tested on Linux on armv7hl, i686, x86_64, aarch64, ppc64le, and s390x.

[BZ #28846]

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit 9c443ac455)
2022-08-22 18:59:26 +02:00
argp argp: Avoid undefined behaviour when invoking qsort(). 2021-02-04 16:44:29 -03:00
assert Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
benchtests tests: use xmalloc to allocate implementation array 2021-07-28 17:45:19 +05:30
bits socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
catgets catgets: Use 64 bit stat for __open_catalog (BZ# 29211) 2022-06-01 13:36:38 -03:00
ChangeLog.old Update ChangeLog.old/ChangeLog.23. 2021-08-01 21:33:43 -04:00
conform Use $(pie-default) with conformtest 2021-12-13 20:59:48 +05:30
crypt Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
csu csu: Implement and use _dl_early_allocate during static startup 2022-05-19 12:13:53 +02:00
ctype Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
debug misc: Fix rare fortify crash on wchar funcs. [BZ 29030] 2022-04-25 18:44:27 +05:30
dirent Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
dlfcn dlfcn: Pass caller pointer to static dlopen implementation (bug 29446) 2022-08-04 20:57:18 +02:00
elf rtld: Use generic argv adjustment in ld.so [BZ #23293] 2022-05-19 16:48:47 +01:00
gmon Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
gnulib Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
grp Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
gshadow Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
hesiod Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
htl htl: Let libc call __pthread_mutex_{,try,un}lock 2021-07-13 23:36:58 +02:00
hurd hurd: Export _hurd_libc_proc_init 2021-04-12 00:23:36 +02:00
iconv iconv: Use 64 bit stat for gconv_parseconfdir (BZ# 29213) 2022-06-01 13:36:56 -03:00
iconvdata gconv: Do not emit spurious NUL character in ISO-2022-JP-3 (bug 28524) 2021-11-04 21:28:43 +01:00
include Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose 2022-05-30 12:38:32 +02:00
inet inet: Use 64 bit stat for ruserpass (BZ# 29210) 2022-06-01 13:34:51 -03:00
intl intl/plural.y: Avoid conflicting declarations of yyerror and yylex 2021-12-23 13:48:04 +01:00
io linux: Fix fchmodat with AT_SYMLINK_NOFOLLOW for 64 bit time_t (BZ#29097) 2022-04-28 10:10:30 -03:00
libio Make sure that the fortified function conditionals are constant 2022-03-11 20:36:24 +05:30
locale localedef: Handle symbolic links when generating locale-archive 2022-03-03 11:58:03 +01:00
localedata Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
login login: Move libutil into libc 2021-06-30 08:43:37 +02:00
mach Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
malloc malloc: Simplify implementation of __malloc_assert 2022-07-21 17:06:27 +02:00
manual x86: Add bounds x86_non_temporal_threshold 2022-07-18 20:45:21 -07:00
math Update floating-point feature test macro handling for C2X 2021-06-01 14:22:06 +00:00
mathvec Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
misc misc: Use 64 bit stat for getusershell (BZ# 29204) 2022-06-01 13:34:49 -03:00
nis nis: nis_local_group may read from __nisgroup[-1] (bug 28075) 2021-07-12 07:58:07 +02:00
nptl nptl: Fix ___pthread_unregister_cancel_restore asynchronous restore 2022-07-13 13:23:20 -03:00
nptl_db nptl_db: Re-use the ELF-to-abilist converter for ABI checking 2021-06-29 22:17:08 +02:00
nscd Use 64 bit time_t stat internally 2021-06-22 12:09:52 -03:00
nss nss: handle stat failure in check_reload_and_get (BZ #28752) 2022-06-13 18:15:36 -04:00
po po/nl.po: Update Dutch translation. 2021-08-01 20:52:28 -04:00
posix Fix deadlock when pthread_atfork handler calls pthread_atfork or dlclose 2022-05-30 12:38:32 +02:00
pwd Annotate additional APIs with GCC attribute access. 2021-05-06 11:01:05 -06:00
resolv Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
resource y2038: Add support for 64-bit time on legacy ABIs 2021-06-15 10:42:11 -03:00
rt librt: add test (bug 28213) 2021-08-16 11:35:35 +05:30
scripts csu: Implement and use _dl_early_allocate during static startup 2022-05-19 12:13:53 +02:00
setjmp nptl: Move __pthread_unwind_next into libc 2021-04-21 19:49:50 +02:00
shadow Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
signal y2038: Add support for 64-bit time on legacy ABIs 2021-06-15 10:42:11 -03:00
socket socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
soft-fp soft-fp: Add __extendhfsf2/__extendhfdf2, __truncsfhf2/__truncdfhf2, __eqhf2/__nehf2 2021-07-07 08:01:32 -07:00
stdio-common Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
stdlib stdlib: Fixup mbstowcs NULL __dst handling. [BZ #29279] 2022-08-15 23:14:15 +02:00
string x86: Shrink code size of memchr-avx2.S 2022-07-18 20:45:21 -07:00
sunrpc CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) 2022-01-17 11:49:25 +01:00
support debug: Synchronize feature guards in fortified functions [BZ #28746] 2022-03-11 20:36:24 +05:30
sysdeps socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
sysvipc Linux: Cleanups after librt move 2021-06-28 09:51:01 +02:00
termios Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
time timezone: handle truncated timezones from tzcode-2021d and later (BZ #28707) 2022-01-07 10:20:58 +01:00
timezone timezone: test-case for BZ #28707 2022-01-07 10:21:11 +01:00
wcsmbs debug: Synchronize feature guards in fortified functions [BZ #28746] 2022-03-11 20:36:24 +05:30
wctype Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
.gitattributes
.gitignore
abi-tags Remove the bulk of the NaCl port. 2017-05-20 08:09:10 -04:00
aclocal.m4 configure: Replaced obsolete AC_TRY_COMPILE 2021-06-04 10:16:00 -03:00
config.h.in i386: Remove broken CAN_USE_REGISTER_ASM_EBP (bug 28771) 2022-01-13 15:21:32 +01:00
config.make.in Add pthread-in-libc, libpthread-routines-var, librt-routines-var 2021-05-03 08:13:32 +02:00
configure Default to --with-default-link=no (bug 25812) 2022-04-22 11:31:14 +02:00
configure.ac Default to --with-default-link=no (bug 25812) 2022-04-22 11:31:14 +02:00
COPYING
COPYING.LIB
extra-lib.mk
gen-locales.mk Improve gen-locales.mk and gen-locale.sh to make test files with @ options work 2018-02-27 17:01:57 +01:00
INSTALL INSTALL: Rephrase -with-default-link documentation 2022-04-26 15:27:43 +02:00
libc-abis riscv: support GNU indirect function 2021-01-10 21:25:13 -05:00
libof-iterator.mk
LICENSES Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
MAINTAINERS Add MAINTAINERS 2017-05-11 13:38:30 -04:00
Makeconfig Run conform/ tests using newly built libc 2021-12-13 09:07:38 +05:30
Makefile Install shared objects under their ABI names 2021-06-28 08:33:57 +02:00
Makefile.help Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
Makefile.in
Makerules debug: Autogenerate _FORTIFY_SOURCE tests 2022-03-11 20:36:24 +05:30
NEWS socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
o-iterator.mk
README Documentation for the RISC-V 32-bit port 2020-08-27 08:17:44 -07:00
Rules Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
shlib-versions nss: Do not mention NSS test modules in <gnu/lib-names.h> 2022-03-11 11:13:34 +01:00
test-skeleton.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
version.h Prepare for glibc 2.34 release. 2021-08-01 21:24:04 -04:00

This directory contains the sources of the GNU C Library.
See the file "version.h" for what release version you have.

The GNU C Library is the standard system C library for all GNU systems,
and is an important part of what makes up a GNU system.  It provides the
system API for all programs written in C and C-compatible languages such
as C++ and Objective C; the runtime facilities of other programming
languages use the C library to access the underlying operating system.

In GNU/Linux systems, the C library works with the Linux kernel to
implement the operating system behavior seen by user applications.
In GNU/Hurd systems, it works with a microkernel and Hurd servers.

The GNU C Library implements much of the POSIX.1 functionality in the
GNU/Hurd system, using configurations i[4567]86-*-gnu.

When working with Linux kernels, this version of the GNU C Library
requires Linux kernel version 3.2 or later.

Also note that the shared version of the libgcc_s library must be
installed for the pthread library to work correctly.

The GNU C Library supports these configurations for using Linux kernels:

	aarch64*-*-linux-gnu
	alpha*-*-linux-gnu
	arc*-*-linux-gnu
	arm-*-linux-gnueabi
	csky-*-linux-gnuabiv2
	hppa-*-linux-gnu
	i[4567]86-*-linux-gnu
	x86_64-*-linux-gnu	Can build either x86_64 or x32
	ia64-*-linux-gnu
	m68k-*-linux-gnu
	microblaze*-*-linux-gnu
	mips-*-linux-gnu
	mips64-*-linux-gnu
	powerpc-*-linux-gnu	Hardware or software floating point, BE only.
	powerpc64*-*-linux-gnu	Big-endian and little-endian.
	s390-*-linux-gnu
	s390x-*-linux-gnu
	riscv32-*-linux-gnu
	riscv64-*-linux-gnu
	sh[34]-*-linux-gnu
	sparc*-*-linux-gnu
	sparc64*-*-linux-gnu

If you are interested in doing a port, please contact the glibc
maintainers; see https://www.gnu.org/software/libc/ for more
information.

See the file INSTALL to find out how to configure, build, and install
the GNU C Library.  You might also consider reading the WWW pages for
the C library at https://www.gnu.org/software/libc/.

The GNU C Library is (almost) completely documented by the Texinfo manual
found in the `manual/' subdirectory.  The manual is still being updated
and contains some known errors and omissions; we regret that we do not
have the resources to work on the manual as much as we would like.  For
corrections to the manual, please file a bug in the `manual' component,
following the bug-reporting instructions below.  Please be sure to check
the manual in the current development sources to see if your problem has
already been corrected.

Please see https://www.gnu.org/software/libc/bugs.html for bug reporting
information.  We are now using the Bugzilla system to track all bug reports.
This web page gives detailed information on how to report bugs properly.

The GNU C Library is free software.  See the file COPYING.LIB for copying
conditions, and LICENSES for notices about a few contributions that require
these additional notices to be distributed.  License copyright years may be
listed using range notation, e.g., 1996-2015, indicating that every year in
the range, inclusive, is a copyrightable year that would otherwise be listed
individually.