diff options
Diffstat (limited to 'meta/recipes-core/eglibc/eglibc-2.19/relocatable_sdk_fix_openpath.patch')
-rw-r--r-- | meta/recipes-core/eglibc/eglibc-2.19/relocatable_sdk_fix_openpath.patch | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/meta/recipes-core/eglibc/eglibc-2.19/relocatable_sdk_fix_openpath.patch b/meta/recipes-core/eglibc/eglibc-2.19/relocatable_sdk_fix_openpath.patch new file mode 100644 index 0000000000..f164f8f9ae --- /dev/null +++ b/meta/recipes-core/eglibc/eglibc-2.19/relocatable_sdk_fix_openpath.patch | |||
@@ -0,0 +1,41 @@ | |||
1 | Upstream-Status: Inappropriate [SDK specific] | ||
2 | |||
3 | eglibc-nativesdk: Fix buffer overrun with a relocated SDK | ||
4 | |||
5 | When ld-linux-*.so.2 is relocated to a path that is longer than the | ||
6 | original fixed location, the dynamic loader will crash in open_path | ||
7 | because it implicitly assumes that max_dirnamelen is a fixed size that | ||
8 | never changes. | ||
9 | |||
10 | The allocated buffer will not be large enough to contain the directory | ||
11 | path string which is larger than the fixed location provided at build | ||
12 | time. | ||
13 | |||
14 | Signed-off-by: Jason Wessel <jason.wessel@windriver.com> | ||
15 | |||
16 | --- | ||
17 | elf/dl-load.c | 12 ++++++++++++ | ||
18 | 1 file changed, 12 insertions(+) | ||
19 | |||
20 | --- a/elf/dl-load.c | ||
21 | +++ b/elf/dl-load.c | ||
22 | @@ -1919,7 +1919,19 @@ open_path (const char *name, size_t name | ||
23 | given on the command line when rtld is run directly. */ | ||
24 | return -1; | ||
25 | |||
26 | + do | ||
27 | + { | ||
28 | + struct r_search_path_elem *this_dir = *dirs; | ||
29 | + if (this_dir->dirnamelen > max_dirnamelen) | ||
30 | + { | ||
31 | + max_dirnamelen = this_dir->dirnamelen; | ||
32 | + } | ||
33 | + } | ||
34 | + while (*++dirs != NULL); | ||
35 | + | ||
36 | buf = alloca (max_dirnamelen + max_capstrlen + namelen); | ||
37 | + | ||
38 | + dirs = sps->dirs; | ||
39 | do | ||
40 | { | ||
41 | struct r_search_path_elem *this_dir = *dirs; | ||