[Bug network/34523] New: Incorrect locking in handle_requests in gai_misc.c may lead to memory corruption

https://sourceware.org/bugzilla/show_bug.cgi?id=34523

            Bug ID: 34523
           Summary: Incorrect locking in handle_requests in gai_misc.c may
                    lead to memory corruption
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: network
          Assignee: unassigned at sourceware dot org
          Reporter: fweimer at redhat dot com
  Target Milestone: ---
             Flags: security-

Created attachment 16939
  --> https://sourceware.org/bugzilla/attachment.cgi?id=16939&action=edit
RHEL-217678.html

Red Hat Product Security has asked me to forward the attached report. I don't
think it's an actual vulnerability.

The issue is that handle_requests clears the EAI_INPROGRESS flag outside of the
critical section, so 

Only part of the suggested fix is valid (the handle_requests change).

I've been told to mention: Found by AISLE in partnership with Red Hat

-- 
You are receiving this mail because:
You are on the CC list for the bug.