glibc/nscd
Florian Weimer c04a21e050 CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
This avoids potential memory corruption when the underlying NSS
callback function does not use the buffer space to store all strings
(e.g., for constant strings).

Instead of custom buffer management, two scratch buffers are used.
This increases stack usage somewhat.

Scratch buffer allocation failure is handled by return -1
(an invalid timeout value) instead of terminating the process.
This fixes bug 31679.

Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
2024-04-25 15:01:07 +02:00
..
aicache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
cachedumper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
connections.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
dbg_log.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Depend hurd: Add hurd thread library 2018-04-02 01:44:14 +02:00
getgrgid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getgrnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbyad_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
gethstbynm3_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwnam_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getpwuid_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbynm_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
getsrvbypt_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
grpcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
hstcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
initgrcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
Makefile Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
mem.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
netgroupcache.c CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680) 2024-04-25 15:01:07 +02:00
nscd_conf.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getai.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getgr_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_gethst_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getpw_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_getserv_r.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_helper.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_initgroups.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_netgroup.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_proto.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_setup_thread.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd_stat.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd-client.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.c Update copyright dates not handled by scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.conf nscd: Improve nscd.conf comments. 2019-08-19 09:57:58 -04:00
nscd.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd.init . 2007-07-31 13:33:18 +00:00
nscd.service nscd: also invalidate netgroup cache on reload 2014-03-19 14:45:10 +01:00
nscd.tmpfiles Add systemd unit file for nscd 2013-12-16 11:22:01 +10:00
pwdcache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
res_hconf.c [BZ #4814] 2007-08-22 03:14:29 +00:00
selinux.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
selinux.h Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
servicescache.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00