glibc/debug
Florian Weimer 4e8a6346cd libio: Avoid _allocate_buffer, _free_buffer function pointers [BZ #23236]
These unmangled function pointers reside on the heap and could
be targeted by exploit writers, effectively bypassing libio vtable
validation.  Instead, we ignore these pointers and always call
malloc or free.

In theory, this is a backwards-incompatible change, but using the
global heap instead of the user-supplied callback functions should
have little application impact.  (The old libstdc++ implementation
exposed this functionality via a public, undocumented constructor
in its strstreambuf class.)
2018-06-01 10:41:03 +02:00
..
Depend
Makefile
Versions
asprintf_chk.c
backtrace-tst.c
backtrace.c Use x86_64 backtrace as generic version. 2018-03-21 17:25:30 +00:00
backtracesyms.c
backtracesymsfd.c
catchsegv.sh
chk_fail.c
confstr_chk.c
dprintf_chk.c
execinfo.h
explicit_bzero_chk.c
fdelt_chk.c
fgets_chk.c Remove _IO_file_flags define. 2018-02-21 14:22:50 -05:00
fgets_u_chk.c Remove _IO_file_flags define. 2018-02-21 14:22:50 -05:00
fgetws_chk.c Remove _IO_file_flags define. 2018-02-21 14:22:50 -05:00
fgetws_u_chk.c Remove _IO_file_flags define. 2018-02-21 14:22:50 -05:00
fortify_fail.c
fprintf_chk.c
fread_chk.c
fread_u_chk.c
fwprintf_chk.c
getcwd_chk.c
getdomainname_chk.c
getgroups_chk.c
gethostname_chk.c
gets_chk.c Remove _IO_file_flags define. 2018-02-21 14:22:50 -05:00
getwd_chk.c
longjmp_chk.c
mbsnrtowcs_chk.c
mbsrtowcs_chk.c
mbstowcs_chk.c
memcpy_chk.c
memmove_chk.c
mempcpy_chk.c
memset_chk.c
noophooks.c
obprintf_chk.c
pcprofile.c
pcprofiledump.c
poll_chk.c
ppoll_chk.c
pread64_chk.c
pread_chk.c
printf_chk.c
read_chk.c
readlink_chk.c
readlinkat_chk.c
readonly-area.c
realpath_chk.c
recv_chk.c
recvfrom_chk.c
segfault.c
snprintf_chk.c
sprintf_chk.c
stack_chk_fail.c
stack_chk_fail_local.c
stpcpy_chk.c
stpncpy_chk.c
strcat_chk.c
strcpy_chk.c
strncat_chk.c
strncpy_chk.c
swprintf_chk.c
test-stpcpy_chk.c
test-strcpy_chk.c
tst-backtrace.h
tst-backtrace2.c
tst-backtrace3.c
tst-backtrace4.c
tst-backtrace5.c
tst-backtrace6.c
tst-chk1.c
tst-chk2.c
tst-chk3.c
tst-chk4.cc
tst-chk5.cc
tst-chk6.cc
tst-lfschk1.c
tst-lfschk2.c
tst-lfschk3.c
tst-lfschk4.cc
tst-lfschk5.cc
tst-lfschk6.cc
tst-longjmp_chk.c
tst-longjmp_chk2.c
tst-longjmp_chk3.c
tst-ssp-1.c
ttyname_r_chk.c
vasprintf_chk.c libio: Avoid _allocate_buffer, _free_buffer function pointers [BZ #23236] 2018-06-01 10:41:03 +02:00
vdprintf_chk.c
vfprintf_chk.c
vfwprintf_chk.c
vprintf_chk.c
vsnprintf_chk.c
vsprintf_chk.c
vswprintf_chk.c
vwprintf_chk.c
warning-nop.c
wcpcpy_chk.c
wcpncpy_chk.c
wcrtomb_chk.c
wcscat_chk.c
wcscpy_chk.c
wcsncat_chk.c
wcsncpy_chk.c
wcsnrtombs_chk.c
wcsrtombs_chk.c
wcstombs_chk.c
wctomb_chk.c
wmemcpy_chk.c
wmemmove_chk.c
wmempcpy_chk.c
wmemset_chk.c
wprintf_chk.c
xtrace.sh