OpenLDAP
Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest

Viewing Build/5464
Full headers

From: rhafer@suse.de
Subject: ucred guarded by __USE_GNU in glibc 2.8
Compose comment
Download message
State:
0 replies:
1 followups: 1

Major security issue: yes  no

Notes:

Notification:


Date: Fri, 11 Apr 2008 08:44:03 GMT
From: rhafer@suse.de
To: openldap-its@OpenLDAP.org
Subject: ucred guarded by __USE_GNU in glibc 2.8
Full_Name: Ralf Haferkamp
Version: Any
OS: Linux (glibc 2.8)
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (85.8.71.17)


Newer glibc Version guards the definition of struct ucred (e.g. used in
liblutil/getpeereid.c) by __USE_GNU, hence it is only available when _GNU_SOURCE
is defined.

The matching glibc changelog only say "Cleanup namespace.". Here's the diff:

http://sourceware.org/cgi-bin/cvsweb.cgi/libc/sysdeps/unix/sysv/linux/bits/socket.h.diff?r1=1.60&r2=1.61&cvsroot=glibc


Followup 1

Download message
Date: Fri, 06 Jun 2008 13:57:57 -0700
From: Howard Chu <hyc@symas.com>
To: rhafer@suse.de
CC: openldap-its@openldap.org
Subject: Re: (ITS#5464) ucred guarded by __USE_GNU in glibc 2.8
rhafer@suse.de wrote:
> Full_Name: Ralf Haferkamp
> Version: Any
> OS: Linux (glibc 2.8)
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (85.8.71.17)
>
>
> Newer glibc Version guards the definition of struct ucred (e.g. used in
> liblutil/getpeereid.c) by __USE_GNU, hence it is only available when
_GNU_SOURCE
> is defined.
>
> The matching glibc changelog only say "Cleanup namespace.". Here's the
diff:
>
> http://sourceware.org/cgi-bin/cvsweb.cgi/libc/sysdeps/unix/sysv/linux/bits/socket.h.diff?r1=1.60&r2=1.61&cvsroot=glibc

This is a bug in glibc. Luca Scamoni reported it upstream here
http://sources.redhat.com/bugzilla/show_bug.cgi?id=6545

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/


Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest


The OpenLDAP Issue Tracking System uses a hacked version of JitterBug

______________
© Copyright 2013, OpenLDAP Foundation, info@OpenLDAP.org