glibc: backport fix for regexec buffer read overrun
authorAlin Nastac <[email protected]>
Thu, 21 Nov 2019 13:06:18 +0000 (14:06 +0100)
committerPetr Štetiar <[email protected]>
Fri, 29 Nov 2019 23:53:36 +0000 (00:53 +0100)
commit839bc1e15ed5c0e00a68c95798b47ae0e279e4e9
tree891fca78cb1ff214cfd63ead7d81d25691fb24f9
parentca7f1ef575749e3e77961a86b00d9c5cbb9cab04
glibc: backport fix for regexec buffer read overrun

Problem found by AddressSanitizer[1]:

 Latest `grep` (git commit 1019e6e) compiled with asan may cause a
 heap-buffer-overflow when `-i` is specified.

     ./grep -i '\(\(\)*.\)*\(\)\(\)\1' /bin/chvt

 =================================================================
 ==16206==ERROR: AddressSanitizer: heap-buffer-overflow on address

1. https://debbugs.gnu.org/34140

Ref: https://sourceware.org/bugzilla/show_bug.cgi?id=24114
Signed-off-by: Alin Nastac <[email protected]>
[commit title and description facelift]
Signed-off-by: Petr Štetiar <[email protected]>
toolchain/glibc/patches/001-regex-read-overrun.patch [new file with mode: 0644]