Xin LI 805288c2f0 In r268924 __fflush was modified so that when write(2) was not successful, ...

_p and _w are adjusted to account for the partial write (if any).

However, _p and _w should not be unconditionally adjusted and should only
be changed when we actually wrote some bytes, or the accumulated accounting
error will eventually result in a heap buffer overflow.

Reported by:	adrian and alfred (Norse Corporation)
Security:	FreeBSD-SA-14:27.stdio
Security:	CVE-2014-8611

2014-12-10 08:18:22 +00:00

..

_flock_stub.c

…

asprintf.c

…

clrerr.c

…

dprintf.c

…

fclose.3

…

fclose.c

…

fcloseall.c

…

fdopen.c

libc/stdio: Fail fdopen() on an execute-only fd.

2014-04-21 17:40:23 +00:00

feof.c

…

ferror.3

…

ferror.c

…

fflush.3

…

fflush.c

In r268924 __fflush was modified so that when write(2) was not successful,

2014-12-10 08:18:22 +00:00

fgetc.c

…

fgetln.3

…

fgetln.c

…

fgetpos.c

…

fgets.3

…

fgets.c

…

fgetwc.c

…

fgetwln.3

…

fgetwln.c

…

fgetws.3

…

fgetws.c

…

fileno.c

…

findfp.c

…

flags.c

…

floatio.h

…

flockfile.3

…

fmemopen.c

- Return NULL and set errno to EINVAL if size is 0 (as required by POSIX).

2014-06-02 13:48:57 +00:00

fopen.3

- Return NULL and set errno to EINVAL if size is 0 (as required by POSIX).

2014-06-02 13:48:57 +00:00

fopen.c

…

fprintf.c

…

fpurge.c

…

fputc.c

…

fputs.3

…

fputs.c

Mostly cosmetic cleanups.

2014-07-22 16:39:11 +00:00

fputwc.c

…

fputws.3

…

fputws.c

Avoid possible cast degradation.

2014-07-22 23:29:54 +00:00

fread.3

…

fread.c

…

freopen.c

In the "Too many open files" edge cases don't try to preserve old

2014-07-26 08:41:03 +00:00

fscanf.c

…

fseek.3

…

fseek.c

…

fsetpos.c

…

ftell.c

For "a"-mode files and rewind/fseek + fwrite combination return meaningful

2014-07-22 22:49:37 +00:00

funopen.3

…

funopen.c

…

fvwrite.c

…

fvwrite.h

…

fwalk.c

…

fwide.3

…

fwide.c

…

fwprintf.c

…

fwrite.c

…

fwscanf.c

…

getc.3

…

getc.c

…

getchar.c

…

getdelim.c

…

getline.3

Fix the example: free the memory that was allocated by getline().

2014-07-31 08:28:42 +00:00

getline.c

…

gets.c

Const-ify a character string.

2014-07-20 20:29:28 +00:00

getw.c

…

getwc.3

…

getwc.c

…

getwchar.c

…

glue.h

…

local.h

…

makebuf.c

…

Makefile.inc

Replace use of ${.CURDIR} by ${LIBC_SRCTOP} and define ${LIBC_SRCTOP}

2014-03-04 02:19:39 +00:00

mktemp.3

…

mktemp.c

…

open_memstream.3

Fix prototypes.

2014-10-28 02:05:57 +00:00

open_memstream.c

…

open_wmemstream.c

…

perror.c

…

printf_l.3

Add missing include files for the printf_l and scanf_l man pages.

2013-11-17 02:03:45 +00:00

printf-pos.c

…

printf.3

use .Mt to mark up email addresses consistently (part4)

2014-06-23 08:25:03 +00:00

printf.c

…

printfcommon.h

…

printflocal.h

…

putc.3

…

putc.c

…

putchar.c

…

puts.c

Mostly cosmetic cleanups.

2014-07-22 16:39:11 +00:00

putw.c

Avoid possible cast degradation.

2014-07-22 23:29:54 +00:00

putwc.3

…

putwc.c

…

putwchar.c

…

refill.c

…

remove.3

…

remove.c

…

rewind.c

rewind: always clear error indicator.

2014-07-22 16:10:56 +00:00

rget.c

…

scanf_l.3

Add missing include files for the printf_l and scanf_l man pages.

2013-11-17 02:03:45 +00:00

scanf.3

…

scanf.c

…

setbuf.3

…

setbuf.c

…

setbuffer.c

…

setvbuf.c

…

snprintf.c

…

sprintf.c

…

sscanf.c

…

stdio.3

…

stdio.c

…

swprintf.c

…

swscanf.c

…

Symbol.map

…

tempnam.c

…

tmpfile.c

…

tmpnam.3

libc man pages: Remove reference to non-existent FreeBSD Security

2014-03-07 15:35:54 +00:00

tmpnam.c

…

ungetc.3

…

ungetc.c

…

ungetwc.3

…

ungetwc.c

…

vasprintf.c

…

vdprintf.c

…

vfprintf.c

Adjust errno on failed prepwrite.

2014-07-20 21:24:29 +00:00

vfscanf.c

…

vfwprintf.c

Adjust errno on failed prepwrite.

2014-07-20 21:24:29 +00:00

vfwscanf.c

…

vprintf.c

…

vscanf.c

…

vsnprintf.c

…

vsprintf.c

…

vsscanf.c

…

vswprintf.c

…

vswscanf.c

…

vwprintf.c

…

vwscanf.c

…

wbuf.c

Adjust errno on failed prepwrite.

2014-07-20 21:24:29 +00:00

wprintf.3

…

wprintf.c

…

wscanf.3

…

wscanf.c

…

wsetup.c

…

xprintf_errno.c

…

xprintf_float.c

…

xprintf_hexdump.c

…

xprintf_int.c

…

xprintf_quote.c

…

xprintf_str.c

…

xprintf_time.c

…

xprintf_vis.c

…

xprintf.c

…