glibc/sysdeps
Nikita Popov b805aebd42 librt: fix NULL pointer dereference (bug 28213)
Helper thread frees copied attribute on NOTIFY_REMOVED message
received from the OS kernel.  Unfortunately, it fails to check whether
copied attribute actually exists (data.attr != NULL).  This worked
earlier because free() checks passed pointer before actually
attempting to release corresponding memory.  But
__pthread_attr_destroy assumes pointer is not NULL.

So passing NULL pointer to __pthread_attr_destroy will result in
segmentation fault.  This scenario is possible if
notification->sigev_notify_attributes == NULL (which means default
thread attributes should be used).

Signed-off-by: Nikita Popov <npv1310@gmail.com>
Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
2021-08-09 20:17:34 +05:30
..
aarch64 glibc.malloc.check: Wean away from malloc hooks 2021-07-22 18:38:08 +05:30
alpha nptl: Move pthread_spin_trylock into libc 2021-04-23 17:06:48 +02:00
arc ARC: elf: make type safe 2021-07-21 13:13:45 -07:00
arm nptl: Remove remaining code from libpthread 2021-05-21 22:35:01 +02:00
csky
generic mtrace: Wean away from malloc hooks 2021-07-22 18:38:06 +05:30
gnu hurd: Fix glob lstat compatibility 2021-07-22 20:31:52 +02:00
hppa
htl htl: Do not expose pthread hidden proto outside libpthread 2021-07-18 20:25:33 +00:00
hurd
i386 i386: Regenerate ulps 2021-07-25 22:29:27 +02:00
ia64 nptl: Remove remaining code from libpthread 2021-05-21 22:35:01 +02:00
ieee754 Update math: redirect roundeven function 2021-06-27 07:56:57 -07:00
m68k
mach hurd: _Fork: unlock malloc before calling fork child hooks 2021-07-27 02:03:01 +02:00
microblaze
mips Update MIPS libm-test-ulps 2021-07-07 15:50:18 +00:00
nios2
nptl Reduce <limits.h> pollution due to dynamic PTHREAD_STACK_MIN 2021-07-12 18:43:32 +02:00
posix gethosts: Remove unused argument _type 2021-08-04 02:23:43 +05:30
powerpc powerpc64: Add checks for Altivec and VSX in ifunc selection 2021-08-06 16:10:08 -03:00
pthread Move malloc hooks into a compat DSO 2021-07-22 18:37:59 +05:30
riscv RISC-V: Update rv64 ULPs 2021-07-21 08:44:09 +02:00
s390 s390: Fix MEMCHR_Z900_G5 ifunc-variant if n>=0x80000000 [BZ #28024] 2021-07-01 16:46:59 +02:00
sh nptl: Move pthread_spin_trylock into libc 2021-04-23 17:06:48 +02:00
sparc Update sparc libm-test-ulps 2021-08-04 17:38:38 -03:00
unix librt: fix NULL pointer dereference (bug 28213) 2021-08-09 20:17:34 +05:30
wordsize-32
wordsize-64
x86 x86-64: Add Avoid_Short_Distance_REP_MOVSB 2021-07-28 13:23:57 -07:00
x86_64 x86-64: Add Avoid_Short_Distance_REP_MOVSB 2021-07-28 13:23:57 -07:00