]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
In r268924 __fflush was modified so that when write(2) was not successful,
authorXin LI <delphij@FreeBSD.org>
Wed, 10 Dec 2014 08:18:22 +0000 (08:18 +0000)
committerXin LI <delphij@FreeBSD.org>
Wed, 10 Dec 2014 08:18:22 +0000 (08:18 +0000)
commit805288c2f062e70e8a9147e980840dcb119a7aa9
treed1914d5635a85d8c0dab209b492d8ffb0265c9e7
parent7f353dddc8cdd7f3e540227191d432f97e56f966
In r268924 __fflush was modified so that when write(2) was not successful,
_p and _w are adjusted to account for the partial write (if any).

However, _p and _w should not be unconditionally adjusted and should only
be changed when we actually wrote some bytes, or the accumulated accounting
error will eventually result in a heap buffer overflow.

Reported by: adrian and alfred (Norse Corporation)
Security: FreeBSD-SA-14:27.stdio
Security: CVE-2014-8611
lib/libc/stdio/fflush.c