aboutsummaryrefslogtreecommitdiffstats
path: root/ChangeLog
diff options
context:
space:
mode:
authorFlorian Weimer <fweimer@redhat.com>2018-08-28 13:19:27 +0200
committerFlorian Weimer <fweimer@redhat.com>2018-08-28 13:19:27 +0200
commit745664bd798ec8fd50438605948eea594179fba1 (patch)
treebd3d398aadf036f461f972116914afeac0adb3bb /ChangeLog
parentc8dd67e7c958de04c3783cbea7c384431707b5f8 (diff)
downloadtermbaud-745664bd798ec8fd50438605948eea594179fba1.tar.gz
termbaud-745664bd798ec8fd50438605948eea594179fba1.tar.xz
termbaud-745664bd798ec8fd50438605948eea594179fba1.zip
nscd: Fix use-after-free in addgetnetgrentX [BZ #23520]
addinnetgrX may use the heap-allocated buffer, so free the buffer in this function.
Diffstat (limited to 'ChangeLog')
-rw-r--r--ChangeLog12
1 files changed, 12 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog
index 2a250970e43..3995e4b536a 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,15 @@
+2018-08-28 Florian Weimer <fweimer@redhat.com>
+
+ [BZ #23520]
+ nscd: Fix use-after-free in addgetnetgrentX and its callers.
+ * nscd/netgroupcache.c
+ (addgetnetgrentX): Add tofreep parameter. Do not free
+ heap-allocated buffer.
+ (addinnetgrX): Free buffer allocated bt addgetnetgrentX.
+ (addgetnetgrentX_ignore): New function.
+ (addgetnetgrent): Call it.
+ (readdgetnetgrent): Likewise.
+
2018-08-28 Rajalakshmi Srinivasaraghavan <raji@linux.vnet.ibm.com>
* string/memmem.c: Use memcmp for first match.