glibc: backport fix for regexec buffer read overrun
authorAlin Nastac <alin.nastac@gmail.com>
Thu, 21 Nov 2019 13:06:18 +0000 (14:06 +0100)
committerPetr Štetiar <ynezz@true.cz>
Fri, 29 Nov 2019 23:53:36 +0000 (00:53 +0100)
commit839bc1e15ed5c0e00a68c95798b47ae0e279e4e9
tree891fca78cb1ff214cfd63ead7d81d25691fb24f9
parentca7f1ef575749e3e77961a86b00d9c5cbb9cab04
glibc: backport fix for regexec buffer read overrun

Problem found by AddressSanitizer[1]:

 Latest `grep` (git commit 1019e6e) compiled with asan may cause a
 heap-buffer-overflow when `-i` is specified.

     ./grep -i '\(\(\)*.\)*\(\)\(\)\1' /bin/chvt

 =================================================================
 ==16206==ERROR: AddressSanitizer: heap-buffer-overflow on address

1. https://debbugs.gnu.org/34140

Ref: https://sourceware.org/bugzilla/show_bug.cgi?id=24114
Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
[commit title and description facelift]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
toolchain/glibc/patches/001-regex-read-overrun.patch [new file with mode: 0644]