Go to file
Florian Weimer 966d6ac9e4 CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
If we failed to add a not-found response to the cache, the dataset
point can be null, resulting in a null pointer dereference.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
(cherry picked from commit 7835b00dbc)
2024-04-25 15:52:33 +02:00
argp argp: Avoid undefined behaviour when invoking qsort(). 2021-02-04 16:44:29 -03:00
assert Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
benchtests tests: use xmalloc to allocate implementation array 2021-07-28 17:45:19 +05:30
bits socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
catgets catgets: Use 64 bit stat for __open_catalog (BZ# 29211) 2022-06-01 13:36:38 -03:00
ChangeLog.old Update ChangeLog.old/ChangeLog.23. 2021-08-01 21:33:43 -04:00
conform Allow #pragma GCC in headers in conformtest 2022-11-11 16:52:03 +01:00
crypt Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
csu csu: Implement and use _dl_early_allocate during static startup 2022-05-19 12:13:53 +02:00
ctype Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
debug debug: Mark libSegFault.so as NODELETE 2023-07-21 16:37:42 +02:00
dirent Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
dlfcn dlfcn: Pass caller pointer to static dlopen implementation (bug 29446) 2022-08-04 20:57:18 +02:00
elf Revert "elf: Fix wrong break removal from 8ee878592c" 2024-02-12 10:46:34 -03:00
gmon gmon: Revert addition of tunables to preserve GLIBC_PRIVATE ABI 2023-04-28 18:52:41 +02:00
gnulib Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
grp Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
gshadow gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (bug 30151) 2023-04-24 15:59:58 +02:00
hesiod Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
htl htl: Let libc call __pthread_mutex_{,try,un}lock 2021-07-13 23:36:58 +02:00
hurd hurd: Export _hurd_libc_proc_init 2021-04-12 00:23:36 +02:00
iconv gconv: Use 64-bit interfaces in gconv_parseconfdir (bug 29583) 2022-09-21 13:13:02 +02:00
iconvdata iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961) 2024-04-17 14:04:21 -03:00
include malloc: Use __get_nprocs on arena_get2 (BZ 30945) 2024-02-12 10:20:44 -03:00
inet inet: Use 64 bit stat for ruserpass (BZ# 29210) 2022-06-01 13:34:51 -03:00
intl intl: Avoid -Wuse-after-free [BZ #26779] 2023-01-11 13:29:41 +01:00
io io: Fix use-after-free in ftw [BZ #26779] 2022-11-11 16:55:09 +01:00
libio Apply asm redirections in stdio.h before first use [BZ #27087] 2022-08-31 10:29:46 +02:00
locale localedef: Handle symbolic links when generating locale-archive 2022-03-03 11:58:03 +01:00
localedata Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
login login: Move libutil into libc 2021-06-30 08:43:37 +02:00
mach Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
malloc malloc: Use __get_nprocs on arena_get2 (BZ 30945) 2024-02-12 10:20:44 -03:00
manual AArch64: Remove Falkor memcpy 2024-04-09 17:59:00 +01:00
math math: Properly cast X_TLOSS to float [BZ #28713] 2023-01-11 15:13:10 +01:00
mathvec Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
misc malloc: Use __get_nprocs on arena_get2 (BZ 30945) 2024-02-12 10:20:44 -03:00
nis nis: Build libnsl with 64 bit time_t 2022-12-28 17:23:26 -03:00
nptl Fix build of nptl/tst-thread_local1.cc with GCC 12 2023-01-11 14:12:47 +01:00
nptl_db nptl_db: Re-use the ELF-to-abilist converter for ABI checking 2021-06-29 22:17:08 +02:00
nscd CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678) 2024-04-25 15:52:33 +02:00
nss Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843] 2023-09-26 15:38:49 -04:00
po po/nl.po: Update Dutch translation. 2021-08-01 20:52:28 -04:00
posix regex: fix buffer read overrun in search [BZ#28470] 2022-11-11 16:54:09 +01:00
pwd Annotate additional APIs with GCC attribute access. 2021-05-06 11:01:05 -06:00
resolv resolv: Avoid GCC 12 false positive warning [BZ #28439]. 2023-01-11 13:34:00 +01:00
resource y2038: Add support for 64-bit time on legacy ABIs 2021-06-15 10:42:11 -03:00
rt librt: add test (bug 28213) 2021-08-16 11:35:35 +05:30
scripts csu: Implement and use _dl_early_allocate during static startup 2022-05-19 12:13:53 +02:00
setjmp nptl: Move __pthread_unwind_next into libc 2021-04-21 19:49:50 +02:00
shadow Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
signal y2038: Add support for 64-bit time on legacy ABIs 2021-06-15 10:42:11 -03:00
socket socket: Check lengths before advancing pointer in CMSG_NXTHDR 2022-08-22 18:59:26 +02:00
soft-fp soft-fp: Add __extendhfsf2/__extendhfdf2, __truncsfhf2/__truncdfhf2, __eqhf2/__nehf2 2021-07-07 08:01:32 -07:00
stdio-common Fix stdio-common tests for GCC 12 -Waddress 2023-01-11 14:12:05 +01:00
stdlib posix: Fix system blocks SIGCHLD erroneously [BZ #30163] 2023-04-28 16:36:24 +02:00
string x86: Fix wcsnlen-avx2 page cross length comparison [BZ #29591] 2022-11-24 14:42:41 -08:00
sunrpc CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768) 2022-01-17 11:49:25 +01:00
support posix: Fix system blocks SIGCHLD erroneously [BZ #30163] 2023-04-28 16:36:24 +02:00
sysdeps powerpc: Fix ld.so address determination for PCREL mode (bug 31640) 2024-04-14 11:27:23 +02:00
sysvipc Linux: Cleanups after librt move 2021-06-28 09:51:01 +02:00
termios Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
time Use 64-bit time_t interfaces in strftime and strptime (bug 30053) 2023-02-07 10:32:47 -03:00
timezone time: Set daylight to 1 for matching DST/offset change (bug 29951) 2023-01-10 17:36:15 +01:00
wcsmbs Apply asm redirections in wchar.h before first use 2022-08-31 10:29:54 +02:00
wctype Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
.gitattributes
.gitignore
abi-tags
aclocal.m4 configure: Replaced obsolete AC_TRY_COMPILE 2021-06-04 10:16:00 -03:00
config.h.in i386: Remove broken CAN_USE_REGISTER_ASM_EBP (bug 28771) 2022-01-13 15:21:32 +01:00
config.make.in Add pthread-in-libc, libpthread-routines-var, librt-routines-var 2021-05-03 08:13:32 +02:00
configure Default to --with-default-link=no (bug 25812) 2022-04-22 11:31:14 +02:00
configure.ac Default to --with-default-link=no (bug 25812) 2022-04-22 11:31:14 +02:00
COPYING
COPYING.LIB
extra-lib.mk
gen-locales.mk Improve gen-locales.mk and gen-locale.sh to make test files with @ options work 2018-02-27 17:01:57 +01:00
INSTALL INSTALL: Rephrase -with-default-link documentation 2022-04-26 15:27:43 +02:00
libc-abis riscv: support GNU indirect function 2021-01-10 21:25:13 -05:00
libof-iterator.mk
LICENSES Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
MAINTAINERS
Makeconfig nis: Build libnsl with 64 bit time_t 2022-12-28 17:23:26 -03:00
Makefile Install shared objects under their ABI names 2021-06-28 08:33:57 +02:00
Makefile.help Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
Makefile.in
Makerules Use LFS and 64 bit time for installed programs (BZ #15333) 2022-12-28 17:23:25 -03:00
NEWS NEWS: Mention bug fixes for 29039/30745/30843 2023-12-23 09:09:18 -08:00
o-iterator.mk
README Documentation for the RISC-V 32-bit port 2020-08-27 08:17:44 -07:00
Rules Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
shlib-versions nss: Do not mention NSS test modules in <gnu/lib-names.h> 2022-03-11 11:13:34 +01:00
test-skeleton.c Update copyright dates with scripts/update-copyrights 2021-01-02 12:17:34 -08:00
version.h Prepare for glibc 2.34 release. 2021-08-01 21:24:04 -04:00

This directory contains the sources of the GNU C Library.
See the file "version.h" for what release version you have.

The GNU C Library is the standard system C library for all GNU systems,
and is an important part of what makes up a GNU system.  It provides the
system API for all programs written in C and C-compatible languages such
as C++ and Objective C; the runtime facilities of other programming
languages use the C library to access the underlying operating system.

In GNU/Linux systems, the C library works with the Linux kernel to
implement the operating system behavior seen by user applications.
In GNU/Hurd systems, it works with a microkernel and Hurd servers.

The GNU C Library implements much of the POSIX.1 functionality in the
GNU/Hurd system, using configurations i[4567]86-*-gnu.

When working with Linux kernels, this version of the GNU C Library
requires Linux kernel version 3.2 or later.

Also note that the shared version of the libgcc_s library must be
installed for the pthread library to work correctly.

The GNU C Library supports these configurations for using Linux kernels:

	aarch64*-*-linux-gnu
	alpha*-*-linux-gnu
	arc*-*-linux-gnu
	arm-*-linux-gnueabi
	csky-*-linux-gnuabiv2
	hppa-*-linux-gnu
	i[4567]86-*-linux-gnu
	x86_64-*-linux-gnu	Can build either x86_64 or x32
	ia64-*-linux-gnu
	m68k-*-linux-gnu
	microblaze*-*-linux-gnu
	mips-*-linux-gnu
	mips64-*-linux-gnu
	powerpc-*-linux-gnu	Hardware or software floating point, BE only.
	powerpc64*-*-linux-gnu	Big-endian and little-endian.
	s390-*-linux-gnu
	s390x-*-linux-gnu
	riscv32-*-linux-gnu
	riscv64-*-linux-gnu
	sh[34]-*-linux-gnu
	sparc*-*-linux-gnu
	sparc64*-*-linux-gnu

If you are interested in doing a port, please contact the glibc
maintainers; see https://www.gnu.org/software/libc/ for more
information.

See the file INSTALL to find out how to configure, build, and install
the GNU C Library.  You might also consider reading the WWW pages for
the C library at https://www.gnu.org/software/libc/.

The GNU C Library is (almost) completely documented by the Texinfo manual
found in the `manual/' subdirectory.  The manual is still being updated
and contains some known errors and omissions; we regret that we do not
have the resources to work on the manual as much as we would like.  For
corrections to the manual, please file a bug in the `manual' component,
following the bug-reporting instructions below.  Please be sure to check
the manual in the current development sources to see if your problem has
already been corrected.

Please see https://www.gnu.org/software/libc/bugs.html for bug reporting
information.  We are now using the Bugzilla system to track all bug reports.
This web page gives detailed information on how to report bugs properly.

The GNU C Library is free software.  See the file COPYING.LIB for copying
conditions, and LICENSES for notices about a few contributions that require
these additional notices to be distributed.  License copyright years may be
listed using range notation, e.g., 1996-2015, indicating that every year in
the range, inclusive, is a copyrightable year that would otherwise be listed
individually.