aboutsummaryrefslogtreecommitdiffstats
path: root/toolchain/glibc/patches/001-regex-read-overrun.patch
Commit message (Collapse)AuthorAgeFilesLines
* toolchain: glibc: Update glibc to version 2.31Hauke Mehrtens2020-04-181-26/+0
| | | | | | | | | | | | | | | This updates glibc to the most recent version 2.31. 001-regex-read-overrun.patch was a backport from a more recent version and is integrated in glibc 2.31. 050-Revert-Disallow-use-of-DES-encryption-functions-in-n.patch is needed to add the DES crypto functions back again. They were removed in glibc 2.28, but we still use them in ppp. musl lib also provides these DES crypto functions. Without them we would have to link ppp against openssl or an other crypto library. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
* glibc: backport fix for regexec buffer read overrunAlin Nastac2019-11-301-0/+26
Problem found by AddressSanitizer[1]: Latest `grep` (git commit 1019e6e) compiled with asan may cause a heap-buffer-overflow when `-i` is specified. ./grep -i '\(\(\)*.\)*\(\)\(\)\1' /bin/chvt ================================================================= ==16206==ERROR: AddressSanitizer: heap-buffer-overflow on address 1. https://debbugs.gnu.org/34140 Ref: https://sourceware.org/bugzilla/show_bug.cgi?id=24114 Signed-off-by: Alin Nastac <alin.nastac@gmail.com> [commit title and description facelift] Signed-off-by: Petr Štetiar <ynezz@true.cz>