| Fix CVE-2014-9402 - denial of service in getnetbyname function. |
| Backport from https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=11e3417af6e354f1942c68a271ae51e892b2814d |
| See https://bugzilla.redhat.com/show_bug.cgi?id=1175369 |
| |
| Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> |
| |
| diff -Nura eglibc-2.19.orig/libc/resolv/nss_dns/dns-network.c eglibc-2.19/libc/resolv/nss_dns/dns-network.c |
| --- eglibc-2.19.orig/libc/resolv/nss_dns/dns-network.c 2015-01-08 16:12:35.024977879 -0300 |
| +++ eglibc-2.19/libc/resolv/nss_dns/dns-network.c 2015-01-08 16:12:42.543992357 -0300 |
| @@ -398,8 +398,8 @@ |
| |
| case BYNAME: |
| { |
| - char **ap = result->n_aliases++; |
| - while (*ap != NULL) |
| + char **ap; |
| + for (ap = result->n_aliases; *ap != NULL; ++ap) |
| { |
| /* Check each alias name for being of the forms: |
| 4.3.2.1.in-addr.arpa = net 1.2.3.4 |
