74 Commits

Author SHA1 Message Date
zhanghao
f0c6bd374b fix:CVE-2023-5156
(cherry picked from commit 2d0047f66b878118bf88a0af202cb92ddeefad5e)
2023-09-26 23:46:25 +08:00
zhanghao
c2558c2082 fix CVE-2023-4086 CVE-2023-5256
(cherry picked from commit 71d5da571a02a08bebd4612f8758aa5101de892a)
2023-09-26 15:21:40 +08:00
zhanghao
5aca6cef92 glibc:CVE-2023-4813
(cherry picked from commit 6f9b736a617280465f8a985c1ba18e04ee85d978)
2023-09-25 08:52:04 +08:00
Zhou Zhifa
a4401a7cd5 Update the version info 2023-07-18 10:44:46 +00:00
Zhou Zhifa
113a76475a Adjust the file name of patch file and Add corresponding changlog. 2023-07-18 07:11:33 +00:00
Zhou Zhifa
10400e30ba mips: Fix argument passing for inlined syscalls on Linux [BZ #25523]
According to [gcc documentation][1], temporary variables must be used for
the desired content to not be call-clobbered.

Fix the Linux inline syscall templates by adding temporary variables,
much like what x86 did before
(commit 381a0c26d73e0f074c962e0ab53b99a6c327066d).

[1]: https://gcc.gnu.org/onlinedocs/gcc/Local-Register-Variables.html

Reference:
https://savannah.gnu.org/bugs/index.php?57781
https://bugs.gentoo.org/708758
https://sourceware.org/bugzilla/show_bug.cgi?id=25523
https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=4fbba6fe904d0094ddc4284066b3860d119cbd4a
https://sourceware.org/legacy-ml/libc-alpha/2020-02/msg00206.html
https://gcc.gnu.org/onlinedocs/gcc/Local-Register-Variables.html

Signed-off-by: Zhou Zhifa <zhou.zhifa@h3c.com>
2023-07-17 08:22:58 +00:00
liqingqing_1229
6d577a3e52 gmon: Fix allocated buffer overflow (bug 29444) 2023-02-23 09:13:35 +08:00
May Shao
f98f66bd1d x86:Add the virtual machine detection in init_cacheinfo
Signed-off-by: May Shao <MayShao@zhaoxin.com>
2022-09-29 14:58:59 +08:00
liqingqing_1229
a7a1eff4c7 optimize Obsoletes version
(cherry picked from commit e854604758e3453b1b6233e041e145ca4e97747d)
2022-07-29 09:11:42 +08:00
Yang Yanchao
3a50155ca7 add libpthread_nonshared.a in glibc-compat-2.17 for old applications
Signed-off-by: Yang Yanchao <yangyanchao6@huawei.com>
2022-07-08 10:07:05 +08:00
xujing
396b87a860 elf: Fix initial-exec TLS access on audit modules (BZ #28096) 2022-05-12 14:24:08 +08:00
konglidong
53549f79b2 modify bogus date in %changelog 2022-05-06 14:45:08 +08:00
liqingqing_1229
ca8dc2c744 Fix __cscncmp_avx2 in strcmp-avx2.S [BZ#28755]
(cherry picked from commit f95f2fe02e913cbc3f9e2d102faf40ca13afc073)
2022-01-28 14:31:14 +08:00
liqingqing_1229
8941dd2d50 fix CVE-2021-3999
(cherry picked from commit 29565817f88a630643f174796bc9f66b4643ca1f)
2022-01-25 20:55:32 +08:00
liqingqing_1229
4419d577d7 sunrpc: fix compile error
(cherry picked from commit 056101988b10c7adf1ee7bd62c1e8e6003bf3943)
2022-01-20 20:55:04 +08:00
liqingqing_1229
3434c0b0bd sunrpc: fix CVE-2022-23218 and fix CVE-2022-23219
(cherry picked from commit 4a1b7f8af6d3ead795434d4ffa6cfccfa405f68a)
2022-01-20 09:06:49 +08:00
Yang Yanchao
91f05bf262 use setlocale instand of xetlocale in tst-iconv-opt
Signed-off-by: Yang Yanchao <yangyanchao6@huawei.com>
(cherry picked from commit d979527e30dcb003e11cfd1e020ec030a6e13c99)
2021-12-24 19:19:17 +08:00
Yang Yanchao
bd0e646866 fix CVE-2016-10228
iconv: revert Add missing brackets
  Rewrite iconv option parsing [BZ #19519]
  intl: Handle translation output codesets with suffixes [BZ #26383]

Signed-off-by: Yang Yanchao <yangyanchao6@huawei.com>
(cherry picked from commit 8fb9c0e121376b43388241f820d3dc3d08551b6e)
2021-12-06 11:16:44 +08:00
xujing
0d97c1aa48 elf: fix pthread_create and dlopen racing
(cherry picked from commit c1ac1c53cbb62cd213db8b007347f464286cc84d)
2021-12-02 20:40:29 +08:00
xujing
0c853f7c13 glibc: fix CVE-2019-1010023
(cherry picked from commit 689b5621b0189e9dd2ba1221eff69186f4ff977f)
2021-12-02 15:52:07 +08:00
chengyechun
e36811bb21 nss make sure startp initialized do first
(cherry picked from commit 54be000bccdf6b217eb6adb2d61c2e96eaed5524)
2021-12-01 09:59:57 +08:00
liqingqing_1229
9c7b389449 gconv: Do not emit spurious NUL character in ISO-2022-JP-3
this is also fix CVE-2021-43396

(cherry picked from commit 9856f5484bd605db15fa0f0da39de0445cbab73c)
2021-11-10 09:10:09 +08:00
Lv Ying
0d74df5e58 [backport]rtld: copy terminating null in tunables_strdup (bug 28256)
Signed-off-by: Lv Ying <lvying6@huawei.com>
(cherry picked from commit ff7eb18d6c589301f4c58dc8ef176901e97eed70)
2021-09-29 14:39:41 +08:00
Lv Ying
4caae5cebe ldconfig: avoid leak on empty paths in config file
Signed-off-by: Lv Ying <lvying6@huawei.com>
(cherry picked from commit 370dee5c64d358049a76aedee5dddaef2b52bfc3)
2021-08-31 15:59:40 +08:00
liqingqing_1229
055e85c986 fix CVE-2021-38604
(cherry picked from commit 006b16dfd187d1eadfb4da6f0a0fc35e4a859a6a)
2021-08-25 11:34:34 +08:00
Lv Ying
0222dab421 _dl_exception_create_format: Add missing va_end
Signed-off-by: Lv Ying <lvying6@huawei.com>
2021-07-31 15:42:08 +08:00
Lv Ying
60e54e1200 [Backport]ldconfig: Fix memory leaks
Signed-off-by: Lv Ying <lvying6@huawei.com>
2021-07-31 14:47:05 +08:00
liqingqing_1229
07c001f883 malloc: tcache shutdown sequence does not work if the thread never allocated anything. (bug 28028)
(cherry picked from commit a066d0d7e5c3e86d2294e6ae44a6c1d3fcd1bf73)
2021-07-05 09:17:34 +08:00
liqingqing_1229
8840d34a7b fix CVE-2021-35942. wordexp: Use strtoul instead of atoi so that overflow can be detected.
(cherry picked from commit 63996cbba6b9e90caaa5b0cbdfe38f6998d49871)
2021-07-01 18:57:46 +08:00
Lv Ying
fb52205131 [Backport]ldconfig: handle .dynstr located in separate segment (bug 25087)
Signed-off-by: Lv Ying <lvying6@huawei.com>
2021-06-30 11:09:38 +08:00
liqingqing_1229
0388e0f959 enable patches to fix bug 27939 and 27902
(cherry picked from commit f032b27d2b11c8384b29db550d5c230d3d4f91d7)
2021-06-26 16:00:36 +08:00
liqingqing_1229
fc9b152772 fix glibc bug 27902 and 27939, align stack to 16 bytes.
(cherry picked from commit 75365e0c0ad27e4789b8e3898763c917b3db2ef4)
2021-06-08 09:25:49 +08:00
liqingqing_1229
15893e323a fix CVE-2021-33574
(cherry picked from commit 4297578f6cf7814cfeace0841be643edb5869e43)
2021-06-07 15:57:47 +08:00
xujing
f095d165ac glibc: Avoid using up static TLS surplus to fix graphical install error 2021-05-17 11:33:03 +08:00
xuhuijie
41e37c0975 pthread_cond_clockwait: add pre-patch to prevent adaptions
(cherry picked from commit f56ebf8358af3a352d6a7bf1eae27eae9ccebcbe)
2021-05-14 08:50:25 +08:00
xuhuijie
868013be85 nptl: Add POSIX-proposed pthread_cond_clockwait
(cherry picked from commit 407544687c2dae5a89a807a7b77e0f11afa44bd2)
2021-04-23 15:57:31 +08:00
compile_success
c15858bde6 replace openEuler by vendor 2021-03-16 14:15:27 +08:00
wangshuo
c8b25549cb Add description for docs 2021-03-01 17:05:28 +08:00
wangshuo
64430bbb73 Add description for valgrind 2021-03-01 17:05:03 +08:00
wangshuo
a00729a6fb Add description for patches 2021-03-01 17:04:40 +08:00
wangshuo
4c13687b53 Add description for SOURCE 2021-03-01 17:04:20 +08:00
wangshuo
8bcf4adb38 Add description for valgrind 2021-03-01 17:03:54 +08:00
wangshuo
6ffe924e00 Add description for building testsuite 2021-03-01 17:03:25 +08:00
wangshuo
3625021511 Add description for testsuite 2021-03-01 17:02:55 +08:00
wangshuo
c367f2ff0d Add description for configure 2021-03-01 17:02:16 +08:00
wangshuo
aa7e1df3f2 Fix CVE-2021-3326, Fix assertion failure in ISO-2022-JP-3 module (bug 27256) 2021-03-01 16:56:22 +08:00
Sdrkun
5736a2c478 backport upstream patches 2021-03-01 15:36:48 +08:00
liqingqing_1229
1f30f988bd revert memcpy optimze for kunpeng to avoid performance regression when input large than kbyte. 2021-03-01 14:27:09 +08:00
wangshuo
027cbf017e Disable threads on Intel vm environment to avoid performance degradation 2021-02-24 19:14:29 +08:00
liqingqing_1229
de13ce57a0 Fix bug 26791: Use O_CLOEXEC in sysconf
bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26791
Fix bug 26853: aarch64: Add unwind information to _start
    bugzilla link: https://sourceware.org/bugzilla/show_bug.cgi?id=26853
2021-02-22 19:05:47 +08:00