[Bug dynamic-link/34360] Harden dynamic-loader resolution of $ORIGIN DST for setuid/setgid binaries

https://sourceware.org/bugzilla/show_bug.cgi?id=3D34360

--- Comment #4 from Florian Weimer <fweimer at redhat dot com> ---
I'm working on a fix for this. The plan is roughly this:

* Remove then need for DL_SCRATCH_NO_MALLOC.
* Merge scratch_buffer and dl_scratch_buffer.
* Extract char_buffer from vscfanf and make it usable independently.
* Use char_buffer for dynamic string token expansion with buffer auto-sizin=
g.
* Have the trusted-path check rewrite path in-place.

The final part is tricky in the current code if trusted paths are longer th=
an
$ORIGIN.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=