diff options
| author | Xin LI <delphij@FreeBSD.org> | 2014-12-10 08:18:22 +0000 |
|---|---|---|
| committer | Xin LI <delphij@FreeBSD.org> | 2014-12-10 08:18:22 +0000 |
| commit | 805288c2f062e70e8a9147e980840dcb119a7aa9 (patch) | |
| tree | d1914d5635a85d8c0dab209b492d8ffb0265c9e7 /lib/libc/softfloat | |
| parent | 7f353dddc8cdd7f3e540227191d432f97e56f966 (diff) | |
In r268924 __fflush was modified so that when write(2) was not successful,
_p and _w are adjusted to account for the partial write (if any).
However, _p and _w should not be unconditionally adjusted and should only
be changed when we actually wrote some bytes, or the accumulated accounting
error will eventually result in a heap buffer overflow.
Reported by: adrian and alfred (Norse Corporation)
Security: FreeBSD-SA-14:27.stdio
Security: CVE-2014-8611
Notes
svn path=/head/; revision=275665
Diffstat (limited to 'lib/libc/softfloat')
0 files changed, 0 insertions, 0 deletions