Adhemerval Zanella
07c24f3539
posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)
...
The parse_tilde function previously used strndupa to allocate memory
for the parsed username on the stack, and since the input is
user-defined, this can lead to a stack overflow.
This patch fixes the issue by replacing strndupa with scratch_buffer,
by reusing the buffer used in the __getpwnam_r call.
The new “tst-wordexp-tilde.c” test is a test-container to avoid using
system-defined NSS modules.
Checked on x86_64-linux-gnu and i686-linux-gnu.
2026-06-22 11:11:24 -03:00
..
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-06-22 11:11:24 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-04-24 17:38:59 -07:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-02-18 09:34:26 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-02-13 09:02:07 +01:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-06-22 11:11:24 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-02-02 18:08:18 -08:00
2026-04-24 17:38:59 -07:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-04-07 13:21:13 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-03-03 09:15:40 +00:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-02-18 09:34:26 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-04-07 13:21:13 -03:00
2026-04-07 13:21:13 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-20 11:34:12 -03:00
2026-06-22 11:11:24 -03:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-01-01 13:42:29 -08:00
2026-06-22 11:11:24 -03:00
2026-01-01 13:42:29 -08:00