glibc/include
Florian Weimer 108bc4049f CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]
The IPv4 address parser in the getaddrinfo function is changed so that
it does not ignore trailing whitespace and all characters after it.
For backwards compatibility, the getaddrinfo function still recognizes
legacy name syntax, such as 192.000.002.010 interpreted as 192.0.2.8
(octal).

This commit does not change the behavior of inet_addr and inet_aton.
gethostbyname already had additional sanity checks (but is switched
over to the new __inet_aton_exact function for completeness as well).

To avoid sending the problematic query names over DNS, commit
6ca53a2453 ("resolv: Do not send queries
for non-host-names in nss_dns [BZ #24112]") is needed.
2019-01-21 21:26:03 +01:00
..
arpa CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018] 2019-01-21 21:26:03 +01:00
bits Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
gnu Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
net
netinet
programs Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
protocols
rpc Run thread shutdown functions in an explicit order 2018-06-26 15:27:12 +02:00
rpcsvc libnsl: Turn remaining symbols into compat symbols [BZ #22701] 2018-01-29 17:42:30 +01:00
sys Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
aio.h
aliases.h
alloc_buffer.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
alloca.h Remove macros extend_alloca, extend_alloca_account [BZ #18023] 2018-06-27 19:20:37 +02:00
allocate_once.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
argp-fmtstream.h
argp.h
argz.h Use libc_hidden_* for argz_next, __argz_next (bug 15105). 2018-02-15 21:00:02 +00:00
array_length.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
assert.h Introduce NO_RTLD_HIDDEN, make hurd use it instead of NO_HIDDEN 2017-10-03 01:33:38 +02:00
atomic.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
byteswap.h
complex.h
cpio.h
crypt.h
ctype.h Use libc_hidden_* for tolower, toupper (bug 15105). 2018-02-23 13:54:53 +00:00
des.h
dirent.h Consolidate scandir{at}{64} implementation 2018-04-20 13:57:12 -03:00
dlfcn.h libc: Extend __libc_freeres framework (Bug 23329). 2018-06-29 22:39:06 -04:00
dso_handle.h
elf.h Properly compute offsets of note descriptor and next note [BZ #22370] 2017-11-28 09:57:00 -08:00
endian.h
envz.h
err.h
errno.h hurd: Fix accessing errno from rtld 2018-03-25 00:48:01 +01:00
error.h
execinfo.h
fcntl.h Fix Linux fcntl OFD locks for non-LFS architectures (BZ#20251) 2018-06-26 13:22:53 -03:00
features.h Use C99-compliant scanf under _GNU_SOURCE with modern compilers. 2019-01-03 11:12:39 -05:00
fenv.h Move fenv.h soft-float inlines from fenv_private.h to include/fenv.h. 2018-09-04 19:52:06 +00:00
float.h Handle more _FloatN, _FloatNx types in include/float.h. 2017-11-07 23:49:04 +00:00
fmtmsg.h
fnmatch.h
fpu_control.h Hide internal __setfpucw function [BZ #18822] 2017-10-01 17:52:15 -07:00
ftw.h
gconv.h
getopt.h
getopt_int.h
glob.h Hide internal __glob64 function [BZ #18822] 2017-10-01 18:02:10 -07:00
gmp.h
gnu-versions.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
grp-merge.h
grp.h
gshadow.h
iconv.h
ifaddrs.h
ifreq.h Hide internal __ifreq function [BZ #18822] 2017-10-01 17:35:46 -07:00
ifunc-impl-list.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
inline-hashtab.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
intprops.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
inttypes.h Use libc_hidden_* for strtoumax (bug 15105). 2018-02-28 14:16:21 +00:00
langinfo.h
libc-diag.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
libc-internal.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
libc-pointer-arith.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
libc-symbols.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
libgen.h
libintl.h
limits.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
link.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
list.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
list_t.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
locale.h
malloc.h
math-narrow-eval.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
math.h Use copysign functions not __copysign functions in glibc libm. 2018-09-27 20:04:48 +00:00
mcheck.h
memory.h
mntent.h Hide internal __hasmntopt function [BZ #18822] 2017-10-01 17:37:42 -07:00
monetary.h Use STRFMON_LDBL_IS_DBL instead of __ldbl_is_dbl. 2018-11-16 09:21:14 -02:00
mqueue.h
netdb.h
netgroup.h
nl_types.h
nss.h nss: Export nscd hash function as __nss_hash [BZ #22459] 2017-11-23 14:08:11 +01:00
nsswitch.h
obstack.h
plural-exp.h Hide internal __gettextparse function [BZ #18822] 2017-10-01 17:31:05 -07:00
poll.h
printf.h
pthread.h
pty.h
pwd.h
regex.h
resolv.h Obsolete p_secstodate. 2017-11-22 22:21:10 +00:00
rounding-mode.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
sched.h Don't use __typeof__ (getcpu) 2018-12-07 12:47:41 -08:00
scratch_buffer.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
search.h
set-hooks.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
setjmp.h Revert "hurd: Avoid PLTs for longjmp & siglongjmp" 2018-04-05 09:38:58 +02:00
sgtty.h
shadow.h
shlib-compat.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
signal.h Introduce NO_RTLD_HIDDEN, make hurd use it instead of NO_HIDDEN 2017-10-03 01:33:38 +02:00
spawn.h posix: Add internal symbols for posix_spawn interface 2018-10-24 15:22:27 -03:00
stab.h
stackinfo.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
stap-probe.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
stdc-predef.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
stdio.h Use C99-compliant scanf under _GNU_SOURCE with modern compilers. 2019-01-03 11:12:39 -05:00
stdio_ext.h
stdlib.h Use libc_hidden_* for atoi (bug 15105). 2018-02-26 18:17:47 +00:00
string.h Run thread shutdown functions in an explicit order 2018-06-26 15:27:12 +02:00
strings.h
stropts.h
stubs-prologue.h
syscall.h
sysexits.h
syslog.h
tar.h
termios.h Hide internal __tcgetattr function [BZ #18822] 2017-10-01 17:48:24 -07:00
tgmath.h
time.h Y2038: make __difftime compatible with 64-bit time 2018-12-20 22:16:55 +01:00
ttyent.h
uchar.h
ucontext.h
ulimit.h
unistd.h hurd: Fix linknamespace of spawni 2018-12-07 20:21:45 +01:00
utime.h
utmp.h
values.h Update copyright dates with scripts/update-copyrights. 2019-01-01 00:11:28 +00:00
verify.h Merge mktime, timegm from upstream Gnulib 2018-09-19 17:09:08 -07:00
wchar.h Use PRINTF_FORTIFY instead of _IO_FLAGS2_FORTIFY (bug 11319) 2018-12-05 18:15:43 -02:00
wctype.h
wordexp.h