Xin LI
805288c2f0
In r268924 __fflush was modified so that when write(2) was not successful,
...
_p and _w are adjusted to account for the partial write (if any).
However, _p and _w should not be unconditionally adjusted and should only
be changed when we actually wrote some bytes, or the accumulated accounting
error will eventually result in a heap buffer overflow.
Reported by: adrian and alfred (Norse Corporation)
Security: FreeBSD-SA-14:27.stdio
Security: CVE-2014-8611
2014-12-10 08:18:22 +00:00
..
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2014-04-21 17:40:23 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2014-12-10 08:18:22 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2012-05-09 17:27:49 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-09-06 13:47:16 +00:00
2014-06-02 13:48:57 +00:00
2014-06-02 13:48:57 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 14:36:44 +00:00
2014-07-22 16:39:11 +00:00
2014-07-22 23:29:54 +00:00
2013-04-23 13:33:13 +00:00
2014-07-26 08:41:03 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 14:36:44 +00:00
2014-07-22 22:49:37 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 14:36:44 +00:00
2013-07-12 17:37:05 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2014-07-31 08:28:42 +00:00
2014-07-20 20:29:28 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 14:36:44 +00:00
2014-03-04 02:19:39 +00:00
2013-08-09 17:24:23 +00:00
2013-08-09 17:24:23 +00:00
2014-10-28 02:05:57 +00:00
2013-02-27 19:50:46 +00:00
2013-02-27 19:50:46 +00:00
2013-04-23 14:36:44 +00:00
2013-11-17 02:03:45 +00:00
2013-04-23 13:33:13 +00:00
2014-06-23 08:25:03 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 14:36:44 +00:00
2014-07-22 16:39:11 +00:00
2014-07-22 23:29:54 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2014-07-22 16:10:56 +00:00
2013-04-23 13:33:13 +00:00
2013-11-17 02:03:45 +00:00
2012-05-12 20:27:13 +00:00
2013-04-23 13:33:13 +00:00
2013-02-18 22:47:59 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-08-09 17:24:23 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2014-03-07 15:35:54 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2014-07-20 21:24:29 +00:00
2013-04-23 13:33:13 +00:00
2014-07-20 21:24:29 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 14:36:44 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2013-04-23 13:33:13 +00:00
2014-07-20 21:24:29 +00:00
2012-05-12 20:27:13 +00:00
2013-04-23 14:36:44 +00:00
2013-08-31 22:32:42 +00:00
2012-07-04 17:35:07 +00:00