glibc:release/2.32/master

Branch merges

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

3ed195a... by Florian Weimer on 2024-04-25

CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)

This avoids potential memory corruption when the underlying NSS
callback function does not use the buffer space to store all strings
(e.g., for constant strings).

Instead of custom buffer management, two scratch buffers are used.
This increases stack usage somewhat.

Scratch buffer allocation failure is handled by return -1
(an invalid timeout value) instead of terminating the process.
This fixes bug 31679.

Reviewed-by: Siddhesh Poyarekar <email address hidden>
(cherry picked from commit c04a21e050d64a1193a6daab872bca2528bda44b)

be60218... by Florian Weimer on 2024-04-25

CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)

The addgetnetgrentX call in addinnetgrX may have failed to produce
a result, so the result variable in addinnetgrX can be NULL.
Use db->negtimeout as the fallback value if there is no result data;
the timeout is also overwritten below.

Also avoid sending a second not-found response. (The client
disconnects after receiving the first response, so the data stream did
not go out of sync even without this fix.) It is still beneficial to
add the negative response to the mapping, so that the client can get
it from there in the future, instead of going through the socket.

Reviewed-by: Siddhesh Poyarekar <email address hidden>
(cherry picked from commit b048a482f088e53144d26a61c390bed0210f49f2)

394eae3... by Florian Weimer on 2024-04-25

CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)

If we failed to add a not-found response to the cache, the dataset
point can be null, resulting in a null pointer dereference.

Reviewed-by: Siddhesh Poyarekar <email address hidden>
(cherry picked from commit 7835b00dbce53c3c87bbbb1754a95fb5e58187aa)

a770648... by Florian Weimer on 2024-04-25

CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)

Using alloca matches what other caches do. The request length is
bounded by MAXKEYLEN.

Reviewed-by: Carlos O'Donell <email address hidden>
(cherry picked from commit 87801a8fd06db1d654eea3e4f7626ff476a9bdaa)

682ad4c... by Charles Fol <email address hidden> on 2024-03-28

iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)

ISO-2022-CN-EXT uses escape sequences to indicate character set changes
(as specified by RFC 1922). While the SOdesignation has the expected
bounds checks, neither SS2designation nor SS3designation have its;
allowing a write overflow of 1, 2, or 3 bytes with fixed values:
'$+I', '$+J', '$+K', '$+L', '$+M', or '$*H'.

Checked on aarch64-linux-gnu.

Co-authored-by: Adhemerval Zanella <email address hidden>
Reviewed-by: Carlos O'Donell <email address hidden>
Tested-by: Carlos O'Donell <email address hidden>

(cherry picked from commit f9dc609e06b1136bb0408be9605ce7973a767ada)

9d5c6d0... by Wilco Dijkstra <email address hidden> on 2022-10-26

aarch64: Use memcpy_simd as the default memcpy

Since __memcpy_simd is the fastest memcpy on almost all cores, replace
the generic memcpy with it.

(cherry picked from commit 91ac82d0c61076aa55ac08f6c7b58c5c28dd2f59)

af3cbee... by Wilco Dijkstra <email address hidden> on 2023-01-11

AArch64: Improve strrchr

Use shrn for narrowing the mask which simplifies code and speeds up small
strings. Unroll the first search loop to improve performance on large
strings.

Reviewed-by: Szabolcs Nagy <email address hidden>
(cherry picked from commit 55599d480437dcf129b41b95be32b48f2a9e5da9)

83cb4f5... by Wilco Dijkstra <email address hidden> on 2023-01-11

AArch64: Optimize strnlen

Optimize strnlen using the shrn instruction and improve the main loop.
Small strings are around 10% faster, large strings are 40% faster on
modern CPUs.

Reviewed-by: Szabolcs Nagy <email address hidden>
(cherry picked from commit ad098893ba3c3344a5f2f6ab1627c47204afdb47)

e059e45... by Wilco Dijkstra <email address hidden> on 2023-01-11

AArch64: Optimize strlen

Optimize strlen by unrolling the main loop. Large strings are 64% faster on
modern CPUs.

Reviewed-by: Szabolcs Nagy <email address hidden>
(cherry picked from commit 03c8ce5000198947a4dd7b2c14e5131738fda62b)

ce9a4f6... by Wilco Dijkstra <email address hidden> on 2023-01-11

AArch64: Optimize strcpy

Unroll the main loop. Large strings are around 20% faster on modern CPUs.

Reviewed-by: Szabolcs Nagy <email address hidden>
(cherry picked from commit 349e48c01e85bd96006860084e76d322e6ca02f1)