Andreas Schwab
fede245d46
- ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE programs (BZ #21209) - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624) - Remove glibc-cpusetsize.diff, no longer useful OBS-URL: https://build.opensuse.org/request/show/505677 OBS-URL: https://build.opensuse.org/package/show/Base:System/glibc?expand=0&rev=458
34 lines
1.2 KiB
Diff
34 lines
1.2 KiB
Diff
2017-03-07 Siddhesh Poyarekar <siddhesh@sourceware.org>
|
|
|
|
[BZ #21209]
|
|
* elf/rtld.c (process_envvars): Ignore LD_HWCAP_MASK for
|
|
AT_SECURE processes.
|
|
* sysdeps/generic/unsecvars.h: Add LD_HWCAP_MASK.
|
|
|
|
Index: glibc-2.25/elf/rtld.c
|
|
===================================================================
|
|
--- glibc-2.25.orig/elf/rtld.c
|
|
+++ glibc-2.25/elf/rtld.c
|
|
@@ -2450,7 +2450,8 @@ process_envvars (enum mode *modep)
|
|
|
|
case 10:
|
|
/* Mask for the important hardware capabilities. */
|
|
- if (memcmp (envline, "HWCAP_MASK", 10) == 0)
|
|
+ if (!__libc_enable_secure
|
|
+ && memcmp (envline, "HWCAP_MASK", 10) == 0)
|
|
GLRO(dl_hwcap_mask) = __strtoul_internal (&envline[11], NULL,
|
|
0, 0);
|
|
break;
|
|
Index: glibc-2.25/sysdeps/generic/unsecvars.h
|
|
===================================================================
|
|
--- glibc-2.25.orig/sysdeps/generic/unsecvars.h
|
|
+++ glibc-2.25/sysdeps/generic/unsecvars.h
|
|
@@ -16,6 +16,7 @@
|
|
"LD_DEBUG\0" \
|
|
"LD_DEBUG_OUTPUT\0" \
|
|
"LD_DYNAMIC_WEAK\0" \
|
|
+ "LD_HWCAP_MASK\0" \
|
|
"LD_LIBRARY_PATH\0" \
|
|
"LD_ORIGIN_PATH\0" \
|
|
"LD_PRELOAD\0" \
|