]> code.ossystems Code Review - openembedded-core.git/commit
glibc: CVE-2014-9402 endless loop in getaddr_r
authorArmin Kuster <akuster@mvista.com>
Wed, 21 Jan 2015 20:43:11 +0000 (12:43 -0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Wed, 11 Feb 2015 17:39:50 +0000 (17:39 +0000)
commit7e3f4ddd001f9c50a49d8ba5ab548af311e6b51f
tree2e3983c1932a820910d3c5886505fb99fc44603a
parent598d8f869a145ced01d059b30f8307df714d1938
glibc: CVE-2014-9402 endless loop in getaddr_r

The getnetbyname function in glibc 2.21 in earlier will enter an infinite loop
if the DNS backend is activated in the system Name Service Switch
configuration, and the DNS resolver receives a positive answer while processing
the network name.

(From OE-Core rev: f03bf84c179f69ef4800ed92a4a9d9401d0e5966)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-core/glibc/glibc/CVE-2014-9402_endless-loop-in-getaddr_r.patch [new file with mode: 0644]
meta/recipes-core/glibc/glibc_2.20.bb