Bug#993373: Use-after-free bug in realpath()

2021-09-03 Thread Madie K. Mckeel
Dear Antonin Thanks for your replay. On Tuesday, August 31, 2021 4:04 PM, Antonin Décimo wrote: > Last year I wrote a lot of patches for pmount, amongst which two > remove the bundled implementation of realpath and switch to the > "modern" interface > > char *realpath(const char *restrict path

Bug#993373: Use-after-free bug in realpath()

2021-08-31 Thread Madie K. Mckeel
Package: pmount Version: 0.9.23-6 Tags: patch Dear Debian maintainers I stumbled over a use-after-free bug in pmount. It's in its realpath implementation when dealing with stacked symlinks, i.e. symlinks pointing to symlinks. (Ironically, pmount "switched to a [self-made] implementation of re

Bug#993373: Use-after-free bug in realpath()

2021-08-31 Thread Antonin Décimo
Hi Madie, Last year I wrote a lot of patches for pmount, amongst which two remove the bundled implementation of realpath and switch to the "modern" interface char *realpath(const char *restrict path, NULL); which has been supported by the libc for quite some time. The original program (mount(