diff options
| author | Siddhesh Poyarekar <siddhesh@redhat.com> | 2013-09-23 11:20:02 +0530 |
|---|---|---|
| committer | Siddhesh Poyarekar <siddhesh@redhat.com> | 2013-09-23 11:29:53 +0530 |
| commit | 141f3a77fe4f1b59b0afa9bf6909cd2000448883 (patch) | |
| tree | b82fc2e16b302d4fdb5c9983f8339eef93e99cd9 /string/strcasecmp_l.c | |
| parent | 0b1f8e35640f5b3f7af11764ade3ff060211c309 (diff) | |
| download | glibc-141f3a77fe4f1b59b0afa9bf6909cd2000448883.tar.gz glibc-141f3a77fe4f1b59b0afa9bf6909cd2000448883.tar.xz glibc-141f3a77fe4f1b59b0afa9bf6909cd2000448883.zip | |
Fall back to non-cached sequence traversal and comparison on malloc fail
strcoll currently falls back to alloca if malloc fails, resulting in a possible stack overflow. This patch implements sequence traversal and comparison without caching indices and rules. Fixes CVE-2012-4424.
Diffstat (limited to 'string/strcasecmp_l.c')
0 files changed, 0 insertions, 0 deletions