freebsd-skq/lib/libc/stdio
Xin LI 805288c2f0 In r268924 __fflush was modified so that when write(2) was not successful,
_p and _w are adjusted to account for the partial write (if any).

However, _p and _w should not be unconditionally adjusted and should only
be changed when we actually wrote some bytes, or the accumulated accounting
error will eventually result in a heap buffer overflow.

Reported by:	adrian and alfred (Norse Corporation)
Security:	FreeBSD-SA-14:27.stdio
Security:	CVE-2014-8611
2014-12-10 08:18:22 +00:00
..
_flock_stub.c
asprintf.c
clrerr.c
dprintf.c
fclose.3
fclose.c
fcloseall.c
fdopen.c
feof.c
ferror.3
ferror.c
fflush.3
fflush.c
fgetc.c
fgetln.3
fgetln.c
fgetpos.c
fgets.3
fgets.c
fgetwc.c
fgetwln.3
fgetwln.c
fgetws.3
fgetws.c
fileno.c
findfp.c
flags.c
floatio.h
flockfile.3
fmemopen.c
fopen.3
fopen.c
fprintf.c
fpurge.c
fputc.c
fputs.3
fputs.c
fputwc.c
fputws.3
fputws.c
fread.3
fread.c
freopen.c
fscanf.c
fseek.3
fseek.c
fsetpos.c
ftell.c
funopen.3
funopen.c
fvwrite.c
fvwrite.h
fwalk.c
fwide.3
fwide.c
fwprintf.c
fwrite.c
fwscanf.c
getc.3
getc.c
getchar.c
getdelim.c
getline.3
getline.c
gets.c
getw.c
getwc.3
getwc.c
getwchar.c
glue.h
local.h
makebuf.c
Makefile.inc
mktemp.3
mktemp.c
open_memstream.3
open_memstream.c
open_wmemstream.c
perror.c
printf_l.3
printf-pos.c
printf.3
printf.c
printfcommon.h
printflocal.h
putc.3
putc.c
putchar.c
puts.c
putw.c
putwc.3
putwc.c
putwchar.c
refill.c
remove.3
remove.c
rewind.c
rget.c
scanf_l.3
scanf.3
scanf.c
setbuf.3
setbuf.c
setbuffer.c
setvbuf.c
snprintf.c
sprintf.c
sscanf.c
stdio.3
stdio.c
swprintf.c
swscanf.c
Symbol.map
tempnam.c
tmpfile.c
tmpnam.3
tmpnam.c
ungetc.3
ungetc.c
ungetwc.3
ungetwc.c
vasprintf.c
vdprintf.c
vfprintf.c
vfscanf.c
vfwprintf.c
vfwscanf.c
vprintf.c
vscanf.c
vsnprintf.c
vsprintf.c
vsscanf.c
vswprintf.c
vswscanf.c
vwprintf.c
vwscanf.c
wbuf.c
wprintf.3
wprintf.c
wscanf.3
wscanf.c
wsetup.c
xprintf_errno.c
xprintf_float.c
xprintf_hexdump.c
xprintf_int.c
xprintf_quote.c
xprintf_str.c
xprintf_time.c
xprintf_vis.c
xprintf.c