[Bug network/34069] Buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238)

"cvs-commit at gcc dot gnu.org via Glibc-bugs" <[email protected]> Wed, 01 Jul 2026 21:37:57 +0000

Newsgroups	gmane.comp.lib.glibc.bugs
Message-ID	<[email protected]/bugzilla/>

https://sourceware.org/bugzilla/show_bug.cgi?id=34069

--- Comment #8 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The release/2.43/master branch has been updated by Aurelien Jarno
<[email protected]>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=8759917de589b125a08f63653170dfcb3de4df31

commit 8759917de589b125a08f63653170dfcb3de4df31
Author: Florian Weimer <[email protected]>
Date:   Fri Jun 19 18:22:20 2026 +0200

    resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)

    This test case covers both input buffer overreads and output buffer
    overflows.  It should systematically cover these issues.

    I used code auto-generation for updating the test expectations for
    truncated RDATA in TXT, ISDN records, after writing the rest
    of the test by hand.

    Assisted-by: LLM
    Reviewed-by: Carlos O'Donell <[email protected]>
    Reviewed-by: Adhemerval Zanella <[email protected]>
    (cherry picked from commit 4ba0b79b9596e5a4951cc9eaa1546a55e543e083)

-- 
You are receiving this mail because:
You are on the CC list for the bug.