about summary refs log tree commit diff
path: root/misc/tst-syslog-long-progname.root
diff options
context:
space:
mode:
authorArjun Shankar <arjun@redhat.com>2024-01-15 17:44:43 +0100
committerArjun Shankar <arjun@redhat.com>2024-01-30 15:53:37 +0100
commit6bd0e4efcc78f3c0115e5ea9739a1642807450da (patch)
tree18ec2375433978e7a6aef01108958524f539a8d6 /misc/tst-syslog-long-progname.root
parent8aeec0eb5a18f9614d18156f9d6092b3525b818c (diff)
downloadglibc-6bd0e4efcc78f3c0115e5ea9739a1642807450da.tar.gz
glibc-6bd0e4efcc78f3c0115e5ea9739a1642807450da.tar.xz
glibc-6bd0e4efcc78f3c0115e5ea9739a1642807450da.zip
syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6246)
__vsyslog_internal did not handle a case where printing a SYSLOG_HEADER
containing a long program name failed to update the required buffer
size, leading to the allocation and overflow of a too-small buffer on
the heap.  This commit fixes that.  It also adds a new regression test
that uses glibc.malloc.check.

Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
Tested-by: Carlos O'Donell <carlos@redhat.com>
Diffstat (limited to 'misc/tst-syslog-long-progname.root')
-rw-r--r--misc/tst-syslog-long-progname.root/postclean.req0
1 files changed, 0 insertions, 0 deletions
diff --git a/misc/tst-syslog-long-progname.root/postclean.req b/misc/tst-syslog-long-progname.root/postclean.req
new file mode 100644
index 0000000000..e69de29bb2
--- /dev/null
+++ b/misc/tst-syslog-long-progname.root/postclean.req