glibc/nss
Siddhesh Poyarekar 977f4b31b7 Fix reads for sizes larger than INT_MAX in AF_INET lookup
Currently for AF_INET lookups from the hosts file, buffer sizes larger
than INT_MAX silently overflow and may result in access beyond bounds
of a buffer.  This happens when the number of results in an AF_INET
lookup in /etc/hosts are very large.

There are two aspects to the problem.  One problem is that the size
computed from the buffer size is stored into an int, which results in
overflow for large sizes.  Additionally, even if this size was
expanded, the function used to read content into the buffer (fgets)
accepts only int sizes.  As a result, the fix is to have a function
wrap around fgets that calls it multiple times with int sizes if
necessary.
2013-10-30 16:19:40 +05:30
..
nss_db Add #include <stdint.h> for uint[32|64]_t usage (except installed headers). 2013-05-16 11:32:54 -05:00
nss_files Fix reads for sizes larger than INT_MAX in AF_INET lookup 2013-10-30 16:19:40 +05:30
Depend
Makefile Link extra-libs consistently with libc and ld.so. 2013-05-31 16:16:33 +00:00
Versions
XXX-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
alias-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
bug-erange.c
databases.def Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
db-Makefile Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
digits_dots.c Fix parsing of numeric hosts in gethostbyname_r 2013-05-21 12:26:33 +02:00
ethers-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
function.def Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getXXbyYY.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getXXbyYY_r.c Set EAI_SYSTEM only when h_errno is NETDB_INTERNAL 2013-05-21 21:54:41 +05:30
getXXent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getXXent_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getent.c Fix getent to call endspent rather than endpwent for shadow database. 2013-04-22 10:44:31 -07:00
getnssent.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
getnssent_r.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
grp-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
hosts-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
key-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
makedb.c Add #include <stdint.h> for uint[32|64]_t usage (except installed headers). 2013-05-16 11:32:54 -05:00
netgrp-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
network-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
nss.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
nss_test1.c
nsswitch.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
nsswitch.conf
nsswitch.h Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
proto-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
pwd-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
rpc-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
service-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
sgrp-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
spwd-lookup.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
test-digits-dots.c Fix parsing of numeric hosts in gethostbyname_r 2013-05-21 12:26:33 +02:00
test-netdb.c Update copyright notices with scripts/update-copyrights. 2013-01-02 19:05:09 +00:00
tst-nss-static.c 2012-04-06 Paul Pluzhnikov <ppluzhnikov@google.com> 2012-04-06 13:49:35 -07:00
tst-nss-test1.c