glibc: backport fix for regexec buffer read overrun
authorAlin Nastac <alin.nastac@gmail.com>
Thu, 21 Nov 2019 13:06:18 +0000 (14:06 +0100)
committerRISCi_ATOM <bob@bobcall.me>
Sun, 22 Dec 2019 11:42:13 +0000 (06:42 -0500)
commit72abdb446cb8d91061dd8c923e8708adff85f6e5
treed0790984a812d648c3ef3b1bfb24db277557c63e
parent8e0571135e64c4fc0c6144ffa48354589acdffc1
glibc: backport fix for regexec buffer read overrun

Problem found by AddressSanitizer[1]:

 Latest `grep` (git commit 1019e6e) compiled with asan may cause a
 heap-buffer-overflow when `-i` is specified.

     ./grep -i '\(\(\)*.\)*\(\)\(\)\1' /bin/chvt

 =================================================================
 ==16206==ERROR: AddressSanitizer: heap-buffer-overflow on address

1. https://debbugs.gnu.org/34140

Ref: https://sourceware.org/bugzilla/show_bug.cgi?id=24114
Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
[commit title and description facelift]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
toolchain/glibc/patches/001-regex-read-overrun.patch [new file with mode: 0644]