about summary refs log tree commit diff
Commit message (Collapse)AuthorAgeFilesLines
...
| * Fix another memory leak in regexp compiler (BZ #17069)Andreas Schwab2014-09-054-4/+15
| | | | | | | | | | | | | | (cherry picked from commit aa6ec754f3b4b1df81d186480c534b6486a1e6ee) Conflicts: NEWS
| * Fix memory leak in regexp compiler (BZ #17069)Andreas Schwab2014-09-054-5/+59
| | | | | | | | | | | | | | (cherry picked from commit 4d43ef1e7434d7d419afbcd754931cb0c794763c) Conflicts: posix/Makefile
| * Fix invalid file descriptor reuse while sending DNS query (BZ #15946)Andreas Schwab2014-09-053-1/+9
| | | | | | | | | | | | | | (cherry picked from commit f9d2d03254a58d92635a311a42253eeed5a40a47) Conflicts: NEWS
| * Properly fix memory leak in _nss_dns_gethostbyname4_r with big DNS answerAndreas Schwab2014-09-058-49/+95
| | | | | | | | | | | | | | Instead of trying to guess whether the second buffer needs to be freed set a flag at the place it is allocated (cherry picked from commit ab09bf616ad527b249aca5f2a4956fd526f0712f)
| * Deduplicate resolv/nss_dns/dns-host.cOndřej Bílka2014-09-051-10/+7
| | | | | | | | | | | | | | In resolv/nss_dns/dns-host.c one of code path duplicated code after that. We merge these paths. (cherry picked from commit ab7ac0f2cf8731fe4c3f3aea6088a7c0127b5725)
| * Fix memory leak in _nss_dns_gethostbyname4_r with big DNS answerAndreas Schwab2014-09-053-3/+17
| | | | | | | | | | | | | | (cherry picked from commit d668061994a7486a3ba9c7d5e7882d85a2883707) Conflicts: NEWS
| * Fix unbound stack use in NIS NSS moduleAndreas Schwab2014-09-056-1/+54
| | | | | | | | | | | | | | (cherry picked from commit 315eb1d86aea489cd6325fd1c2521dcfb4fc0e1c) Conflicts: NEWS
| * Mention CVE-2014-4043 in NEWSAllan McRae2014-09-052-0/+10
| | | | | | | | | | | | | | (cherry picked from commit d03efb2f979defd473955a455d66b949961d26b2) Conflicts: NEWS
| * posix_spawn_faction_addopen: Add missing string.h include directiveStefan Liebler2014-09-052-0/+5
| | | | | | | | | | | | This is needed to avoid a PLT call on s390. (cherry picked from commit 35a5e3e338ae17f3d42c60a708763c5d498fb840)
| * posix_spawn_file_actions_addopen needs to copy the path argument (BZ 17048)Florian Weimer2014-06-226-9/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | POSIX requires that we make a copy, so we allocate a new string and free it in posix_spawn_file_actions_destroy. Reported by David Reid, Alex Gaynor, and Glyph Lefkowitz. This bug may have security implications. (cherry picked from commit 89e435f3559c53084498e9baad22172b64429362) Conflicts: NEWS
| * Fixed pthread_spin_lock on sparc32/64 (bug 16882)Guo Yixuan2014-06-036-6/+126
| | | | | | | | | | | | | | | | | | | | | | [BZ #16882] * nptl/sysdeps/sparc/sparc32/pthread_spin_lock.S (pthread_spin_lock): Branch out of spin loop to proper location. * nptl/sysdeps/sparc/sparc64/pthread_spin_lock.S (pthread_spin_lock): Likewise. * nptl/tst-spin4.c: New test. * nptl/Makefile (tests): Add tst-spin4.
| * aarch64: Merge __local_multiple_threads offset with memory referenceRichard Henderson2014-05-212-5/+10
| | | | | | | | | | | | | | | | This also highlights that we'd been loading 64-bits instead of the proper 32-bits. Caught by the linker as a relocation error, since the variable happened to be unaligned for 64-bits. Cherry-pick of a6b3657be6bc5067aeec98d990f60765361c6557.
| * Fix sparc memcpy data corruption when using niagara2 optimized routines.Jose E. Marchesi2014-05-173-1/+8
| | | | | | | | | | * sysdeps/sparc/sparc64/multiarch/memcpy-niagara2.S: Add missing membar to avoid block loads/stores to overlap previous stores.
| * tzselect: use zonedir instead of current working directorySami Kerola2014-05-162-1/+6
| | | | | | | | | | | | | | | | (cherry picked from commit 893b4f375668c025cbd6828f82a8844edda276d1) (cherry picked from commit c72399fbc5228580a560d8fe319ff98150928b05) Conflicts: timezone/Makefile
| * Update Swedish translationsAllan McRae2014-05-162-6/+10
| | | | | | | | (cherry picked from commit d51d659d114e2edb0037b2af45d6ee36458e48d1)
| * SPARC: add prlimit and prlimit64 in <bits/resource.h> (BZ #16943)Aurelien Jarno2014-05-163-1/+35
| | | | | | | | | | | | | | | | | | | | prlimit and prlimit64 have been added in the main <bits/resource.h>, but not in the SPARC specific version. Fix that. Note: this is Debian bug#703559, reported by Emilio Pozuelo Monfort <pochu@debian.org> (cherry picked from commit d16e6ec7ca2c861ba681e3a2fbd431725774292e)
| * SPARC: add EFD_SEMAPHORE in <bits/eventfd.h> (BZ #16916)Aurelien Jarno2014-05-073-1/+9
| | | | | | | | | | | | | | EFD_SEMAPHORE has been added in the main <bits/eventfd.h>, but not in the SPARC specific version. Fix that. (cherry picked from commit 83df9ad0cc861ef24f08a88c5a4c055e2516d33c)
| * misc/sys/xattr.h: guard against linux uapi header inclusionSerge Hallyn2014-05-041-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If the glibc xattr.h header is included after the uapi header, compilation fails due to an enum re-using a #define from the uapi header. Protect against this by guarding the define and enum inclusions against each other. (A corresponding kernel patch has been sent here: http://lkml.org/lkml/2014/3/7/331 ) (See https://lists.debian.org/debian-glibc/2014/03/msg00029.html and https://sourceware.org/glibc/wiki/Synchronizing_Headers for more information.) Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> (cherry picked from commit fdbe8eae2b9aed74dabba1b0a189c5d7d61bf032)
| * Update Esperanto translationsAllan McRae2014-05-042-11/+15
| | | | | | | | (cherry picked from commit d69aeb123961252ddd2a23acc7dc9ce0ae2cfa5f)
| * NEWS: Add 16885 to fixed bug list.David S. Miller2014-05-011-1/+1
| |
| * Fix v9/64-bit strcmp when string ends in multiple zero bytes.David S. Miller2014-05-013-0/+69
| | | | | | | | | | | | | | | | | | | | [BZ #16885] * sysdeps/sparc/sparc64/strcmp.S: Fix end comparison handling when multiple zero bytes exist at the end of a string. Reported by Aurelien Jarno <aurelien@aurel32.net> * string/test-strcmp.c (check): Add explicit test for situations where there are multiple zero bytes after the first.
| * Fix sign of input to bsloww1 (BZ #16623)Siddhesh Poyarekar2014-02-273-7/+18
| | | | | | | | | | | | | | | | In 84ba214c, I removed some redundant sign computations and in the process, I incorrectly got rid of a temporary variable, thus passing the absolute value of the input to bsloww1. This caused #16623. This fix undoes the incorrect change.
* | powerpc: Fix incorrect results for pow when using FMAAdhemerval Zanella2015-03-103-1/+7
| | | | | | | | | | This patch adds no FMA generation for e_pow to avoid precision issues for powerpc. This fixes BZ#18104.
* | CVE-2015-1472: wscanf allocates too little memoryPaul Pluzhnikov2015-02-234-8/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | BZ #16618 Under certain conditions wscanf can allocate too little memory for the to-be-scanned arguments and overflow the allocated buffer. The implementation now correctly computes the required buffer size when using malloc. A regression test was added to tst-sscanf. Conflicts: ChangeLog NEWS
* | CVE-2014-7817: wordexp fails to honour WRDE_NOCMD.Carlos O'Donell2015-01-164-13/+77
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The function wordexp() fails to properly handle the WRDE_NOCMD flag when processing arithmetic inputs in the form of "$((... ``))" where "..." can be anything valid. The backticks in the arithmetic epxression are evaluated by in a shell even if WRDE_NOCMD forbade command substitution. This allows an attacker to attempt to pass dangerous commands via constructs of the above form, and bypass the WRDE_NOCMD flag. This patch fixes this by checking for WRDE_NOCMD in exec_comm(), the only place that can execute a shell. All other checks for WRDE_NOCMD are superfluous and removed. We expand the testsuite and add 3 new regression tests of roughly the same form but with a couple of nested levels. On top of the 3 new tests we add fork validation to the WRDE_NOCMD testing. If any forks are detected during the execution of a wordexp() call with WRDE_NOCMD, the test is marked as failed. This is slightly heuristic since vfork might be used in the future, but it provides a higher level of assurance that no shells were executed as part of command substitution with WRDE_NOCMD in effect. In addition it doesn't require libpthread or libdl, instead we use the public implementation namespace function __register_atfork (already part of the public ABI for libpthread). Tested on x86_64 with no regressions.
* | Label CVE-2014-9402 in NEWSAllan McRae2015-01-161-2/+3
| |
* | Avoid infinite loop in nss_dns getnetbyname [BZ #17630]Florian Weimer2015-01-163-3/+12
| |
* | CVE-2012-3406: Stack overflow in vfprintf [BZ #16617]Jeff Law2015-01-167-5/+204
| | | | | | | | | | | | A larger number of format specifiers coudld cause a stack overflow, potentially allowing to bypass _FORTIFY_SOURCE format string protection.
* | Mention CVE-2014-4043 in NEWSAllan McRae2015-01-162-0/+10
| |
* | posix_spawn_file_actions_addopen needs to copy the path argument (BZ 17048)Florian Weimer2015-01-166-8/+54
| | | | | | | | | | | | | | | | POSIX requires that we make a copy, so we allocate a new string and free it in posix_spawn_file_actions_destroy. Reported by David Reid, Alex Gaynor, and Glyph Lefkowitz. This bug may have security implications.
* | _nl_find_locale: Improve handling of crafted locale names [BZ #17137]Florian Weimer2015-01-166-15/+290
| | | | | | | | | | Prevent directory traversal in locale-related environment variables (CVE-2014-0475).
* | __gconv_translit_find: Disable function [BZ #17187]Florian Weimer2015-01-163-174/+19
| | | | | | | | | | This functionality has never worked correctly, and the implementation contained a security vulnerability (CVE-2014-5119).
* | CVE-2014-6040: Crashes on invalid input in IBM gconv modules [BZ #17325]Florian Weimer2015-01-1611-11/+57
| | | | | | | | | | These changes are based on the fix for BZ #14134 in commit 6e230d11837f3ae7b375ea69d7905f0d18eb79e5.
* | PowerPC: Fix gprof entry point for LEAdhemerval Zanella2014-08-283-1/+9
| | | | | | | | | | | | | | This patch fixes the ELFv2 gprof entry point since the ABI does not define function descriptors. It fixes BZ#17213. This is a backport of a53fbd8e6cd2f69bdfa3431d616a5f332aea6664.
* | Correct DT_PPC64_NUMAlan Modra2014-08-283-2/+8
| | | | | | | | | | | | | | | | [BZ #17153] * elf/elf.h (DT_PPC64_NUM): Correct value. * NEWS: Add to fixed bug list. This is a backport of f6c44d475104e931bab2b4ffa499961088de673c.
* | PowerPC: Cleanup powerpc memmoveAdhemerval Zanella2014-08-286-25/+15
| | | | | | | | | | | | | | Now that MEMCPY_OK_FOR_FWD_MEMMOVE should be define on memcopy.h there is no need to specialized powerpc memmove implementation. This patch moves the define set to powerpc memcopy and cleanup its definition on powerpc code.
* | PowerPC: Fix compiler warningsAdhemerval Zanella2014-08-284-3/+12
| | | | | | | | | | This patch fixes some compiler due trailing data in #undef directives and due missing prototypes.
* | PowerPC: Add ifunc tests for memmoveAdhemerval Zanella2014-08-282-0/+11
| | | | | | | | | | | | | | This patch add the missing ifunc tests definition for memmove ppc32 optimization patch (commit 07aedd7). This is a backport of 91f4b564bd7bedcd93e7047cad570ce292d6330b.
* | PowerPC: Align power7 memcpy using VSX to quadwordAdhemerval Zanella2014-08-283-20/+10
| | | | | | | | | | | | This patch changes power7 memcpy to use VSX instructions only when memory is aligned to quardword. It is to avoid unaligned kernel traps on non-cacheable memory (for instance, memory-mapped I/O).
* | PowerPC: optimized memmove for POWER7/PPC32Adhemerval Zanella2014-08-285-1/+109
| | | | | | | | | | This patch adds a optimized memmove for power7 by using the optimized power7 memcpy for forward copying.
* | PowerPC: optimized memmove for POWER7/PPC64Adhemerval Zanella2014-08-2811-2/+1037
| | | | | | | | | | | | | | | | | | | | | | This patch adds an optimized memmove optimization for POWER7/powerpc64. Basically the idea is to use the memcpy for POWER7 on non-overlapped memory regions and a optimized backward memcpy for memory regions that overlap (similar to the idea of string/memmove.c). The backward memcpy algorithm used is similar the one use for memcpy for POWER7, with adjustments done for alignment. The difference is memory is always aligned to 16 bytes before using VSX/altivec instructions.
* | PowerPC: memmove default implementation cleanupAdhemerval Zanella2014-08-282-98/+7
| | | | | | | | | | | | | | | | | | | | This patch removes the powerpc specific logic in memmove and instead include default implementation with MEMCPY_OK_FOR_FWD_MEMMOVE defined. This lead in a increase performance, since the constraints to use memcpy in powerpc code are too restrictive and memcpy can be used for any forward memmove. This is a backport of d6f68bbef4427850c2901728a1d13efc0e687297.
* | PowerPC: strcat optimization for PPC64/POWER7Vidya Ranganathan2014-08-287-4/+118
| | | | | | | | | | | | | | | | This patch adds an ifunc power7 strcat symbol that uses the logic on sysdeps/powerpc/strcat.c but call power7 strlen/strcpy symbols instead of default ones. This is a backport of bc8ea38590070604006399e42469087e943fc8ec.
* | PowerPC: sync hwcap.h capabilitiesAdhemerval Zanella2014-08-282-0/+7
| | | | | | | | | | | | | | | | | | Linux commit dd58a092c4202f2bd490adab7285b3ff77f8e467 added the PPC_FEATURE2_VEC_CRYPTO auvx capability to indicate whether to hardware supports vector crypto hardware instructions. This patch adds its definition to powerpc hwcap bits. This is a backport of db22400947e1c82153e5270d23fed53fc1e3a659.
* | PowerPC: Fix nearbyintl failure for few inputsRajalakshmi Srinivasaraghavan2014-08-284-1/+23
| | | | | | | | | | | | | | | | | | | | This patch fixes few failures in nearbyintl() where the fraction part is close to 0.5.i The new tests added report few extra failures in nearbyint_downward and nearbyint_towardzero which is a known issue. Fixes #17031. This is a backport of 754c5a08aacb44895d1ab97c553ce424eb43f761.
* | PowerPC: Optimized strcmp for PPC64/POWER7Vidya Ranganathan2014-06-117-1/+329
| | | | | | | | | | | | | | | | Optimization is achieved on 8 byte aligned strings with double word comparison using cmpb instruction. On unaligned strings loop unrolling is applied for Power7 gain. It is a backport of e23d3d2690bf63207b1a47e83a94693daebbbfe5.
* | PowerPC: Fix optimized strncat strlen callAdhemerval Zanella2014-06-062-1/+8
| | | | | | | | | | | | | | | | | | This patch fixes the optimized ppc64/power7 strncat strlen call for static build without ifunc enabled. The strlen symbol to call in such situation is just strlen, instead of __GI_strlen (since the __GI_ alias is just created for shared objects). It is a backport of ed36bfa18faf9be457575568e64b8409e46caa22.
* | PowerPC: Fix --disable-multi-arch buildsAdhemerval Zanella2014-06-0611-6/+31
| | | | | | | | | | | | | | | | | | | | | | | | This patch fixes some powerpc32 and powerpc64 builds with --disable-multi-arch option along with different --with-cpu=powerN. It cleanups the Implies directories by removing the multiarch folder for non multiarch config and also fixing two assembly implementations: powerpc64/power7/strncat.S that is calling the wrong strlen; and power8/fpu/s_isnan.S that misses the hidden_def and weak_alias directives. It is a backport of de21c33c068c8e39afb5711613a7c083c11ce6a1.
* | PowerPC: Remove 64 bits instructions in PPC32 codeAdhemerval Zanella2014-05-269-16/+28
| | | | | | | | | | | | This patch replaces the insrdi by insrwi in powerpc32 assembly. It is a backport of d298c41635ce7f2dc7c3eccc842fe3aa754c0c8e.
* | PowerPC: Fix memchr ifunc hidden symbol for PPC32Adhemerval Zanella2014-05-223-10/+21
| | | | | | | | | | | | | | | | | | | | | | This patch fixes a similar issue to 736c304a1ab4cee36a2f3343f1698bc0abae4608, where for PPC32 if the symbol is defined as hidden (memchr) then compiler will create a local branc (symbol@local) and the linker will not create a required PLT call to make the ifunc work. It changes the default hidden symbol (__GI_memchr) to default memchr symbol for powerpc32 (__memchr_ppc32). Backport of 3d2badacf185fac740a2992240a817fb2ca325af.