RepoMirrors/musl
1
0
Fork 0
mirror of git://git.musl-libc.org/musl synced 2025-03-11 06:07:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix theoretical out-of-bound access in dynamic linker

Browse Source 
one of the arguments to memcmp may be shorter than the length l-3, and
memcmp is under no obligation not to access past the first byte that
differs. instead use strncmp which conveys the correct semantics. the
performance difference is negligible here and since the code is only
use for shared libc, both functions are already linked anyway.
This commit is contained in:
Rich Felker 2013-07-31 15:14:06 -04:00
parent f8c376da95
commit 27593d3a35
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/ldso/dynlink.c
View File

@ -467,7 +467,7 @@ static struct dso *load_library(const char *name)
char *z = strchr(name, '.');
if (z) {
size_t l = z-name;
for (rp=reserved; *rp && memcmp(name+3, rp, l-3); rp+=strlen(rp)+1);
for (rp=reserved; *rp && strncmp(name+3, rp, l-3); rp+=strlen(rp)+1);
if (*rp) {
if (ldd_mode) {
/* Track which names have been resolved