glibc/nscd
Florian Weimer b048a482f0 CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
The addgetnetgrentX call in addinnetgrX may have failed to produce
a result, so the result variable in addinnetgrX can be NULL.
Use db->negtimeout as the fallback value if there is no result data;
the timeout is also overwritten below.

Also avoid sending a second not-found response.  (The client
disconnects after receiving the first response, so the data stream did
not go out of sync even without this fix.)  It is still beneficial to
add the negative response to the mapping, so that the client can get
it from there in the future, instead of going through the socket.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
2024-04-25 15:01:07 +02:00
..
aicache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cachedumper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
connections.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Depend hurd: Add hurd thread library 2018-04-02 01:44:14 +02:00
getgrgid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getgrnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbyad_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbynm3_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwuid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbynm_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbypt_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
grpcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
hstcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
initgrcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Makefile Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
mem.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
netgroupcache.c CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678) 2024-04-25 15:01:07 +02:00
nscd_conf.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getai.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getgr_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_gethst_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getpw_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getserv_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_helper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_initgroups.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_netgroup.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_proto.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_setup_thread.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_stat.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd-client.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.c Update copyright dates not handled by scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.conf nscd: Improve nscd.conf comments. 2019-08-19 09:57:58 -04:00
nscd.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.init . 2007-07-31 13:33:18 +00:00
nscd.service nscd: also invalidate netgroup cache on reload 2014-03-19 14:45:10 +01:00
nscd.tmpfiles Add systemd unit file for nscd 2013-12-16 11:22:01 +10:00
pwdcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
res_hconf.c [BZ #4814] 2007-08-22 03:14:29 +00:00
selinux.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
selinux.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
servicescache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00