Go to file
Florian Weimer 676599b36a Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724]
This prevents injection of ':' and '\n' into output functions which
use the NSS files database syntax.  Critical fields (user/group names
and file system paths) are checked strictly.  For backwards
compatibility, the GECOS field is rewritten instead.

The getent program is adjusted to use the put*ent functions in libc,
instead of local copies.  This changes the behavior of getent if user
names start with '-' or '+'.
2015-10-02 11:34:13 +02:00
argp Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
assert Add ersatz _Static_assert on older C hosts 2015-02-07 14:43:27 -08:00
benchtests Add a new benchmark for isinf/isnan/isnormal/isfinite/fpclassify. The test uses 2 arrays with 1024 doubles, one with 99% finite FP numbers (10% zeroes, 10% negative) and 1% inf/NaN, the other with 50% inf, and 50% Nan. 2015-09-18 16:02:38 +01:00
bits Move bits/atomic.h to atomic-machine.h (bug 14912). 2015-09-11 20:00:19 +00:00
catgets Fix trailing space. 2015-08-08 15:54:40 -07:00
conf
conform Test for weak undefined symbols in linknamespace.pl. 2015-09-18 00:52:07 +00:00
crypt Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
csu Fix gcrt0.o compilation 2015-08-07 01:38:39 +02:00
ctype Fix isblank / isascii / toascii namespace (bug 17635). 2015-01-05 15:06:57 +00:00
debug Fix strcpy_chk and stpcpy_chk performance. 2015-08-25 15:06:33 +02:00
dirent Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
dlfcn Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
elf [BZ #17250] Fix static dlopen default library search path 2015-09-25 09:37:12 +01:00
gmon Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
gnulib Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
grp Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
gshadow Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
hesiod Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
hurd Fix warnings 2015-03-21 04:49:44 +01:00
iconv Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
iconvdata fix non-portable echo -n usage 2015-08-09 04:19:12 -04:00
include Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
inet Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
intl Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
io Readd O_LARGEFILE flag for openat64 (bug 18781) 2015-08-10 18:10:19 +02:00
libidn Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
libio Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
locale localedef: improve error message [BZ #16985] 2015-09-11 23:25:06 -04:00
localedata relocate localedata ChangeLog entries 2015-08-19 17:55:06 -04:00
login Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
mach Add missing __mach_host_self_ symbol in Versions 2015-09-22 02:02:20 +02:00
malloc Use ALIGN_DOWN in systrim. 2015-09-14 15:32:47 -04:00
manual Files open O_WRONLY not supported in fallocate emulation. 2015-09-29 11:32:36 -04:00
math Fix ldbl-128 / ldbl-128ibm lgamma overflow handling (bug 16347, bug 19046). 2015-10-01 17:15:54 +00:00
mathvec This is update for configure, build and install of vector math library. 2015-05-14 18:07:06 +03:00
misc Use __pthread_setcancelstate in libc.a 2015-09-17 16:38:54 -07:00
nis Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
nptl Remove ignored symbols from nptl/Versions 2015-09-22 09:32:38 -07:00
nptl_db Fix DTV race, assert, DTV_SURPLUS Static TLS limit, and nptl_db garbage 2015-03-17 00:31:49 -03:00
nscd nscd: drop selinux/flask.h include 2015-07-08 03:18:27 -04:00
nss Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
po Update de.po from Translation Project (bug 4404). 2015-09-16 16:51:28 +00:00
posix Use __pthread_setcancelstate in libc.a 2015-09-17 16:38:54 -07:00
pwd Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
resolv Fix several build failures with GCC6 due to unused static variables. 2015-09-18 20:42:54 +01:00
resource Fix nice getpriority, setpriority namespace (bug 18553). 2015-06-17 20:22:39 +00:00
rt Fix mq_receive, mq_send mq_timed* namespace (bug 18545). 2015-06-17 20:19:04 +00:00
scripts [BZ #18796] 2015-08-19 16:54:28 +03:00
setjmp Modify several tests to use test-skeleton.c 2015-07-15 15:10:23 +05:30
shadow Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
signal Fix psignal, psiginfo declaration conditions (bug 18483). 2015-06-05 21:14:16 +00:00
socket Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
soft-fp Fix undefined warning messages in GCC 6. 2015-08-27 08:09:49 -07:00
stdio-common Cleanup a few cases where isinf is used to get the signbit to improve the readability and maintainability and allow inlining. 2015-09-18 21:19:48 +01:00
stdlib Refactor code forcing underflow exceptions. 2015-09-23 22:42:30 +00:00
streams Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
string Let 'make check subdirs=string' succeed even when it's invoked 2015-09-28 16:55:57 -04:00
sunrpc Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
sysdeps PowerPC: Add comments to optimized strncpy 2015-10-01 17:36:55 -03:00
sysvipc Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
termios Update copyright dates with scripts/update-copyrights. 2015-01-02 16:29:47 +00:00
time Fix BZ #18985 -- out of range data to strftime() causes a segfault 2015-09-26 13:27:48 -07:00
timezone timezone: add a configure flag to disable program install 2015-09-18 19:39:46 -04:00
wcsmbs Move bits/libc-lock.h and bits/libc-lockP.h out of bits/ (bug 14912). 2015-09-08 21:11:03 +00:00
wctype Fix regex wctype namespace (bug 18495). 2015-06-05 20:04:47 +00:00
.gitattributes exempt timezone files from the no-bad-whitespace policy 2009-06-15 18:15:54 +02:00
.gitignore Add *.pyc to .gitignore 2015-05-18 15:26:26 +05:30
abi-tags Add arm-nacl port. 2015-04-17 09:02:19 -07:00
aclocal.m4 Make aclocal.m4 comment mention updating install.texi for autoconf version. 2014-10-31 22:44:17 +00:00
BUGS [BZ #5222] 2007-10-28 08:24:07 +00:00
ChangeLog Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
ChangeLog.1
ChangeLog.2
ChangeLog.3
ChangeLog.4
ChangeLog.5 * sysdeps/posix/getaddrinfo.c: Implement configuration file 2006-05-04 06:38:07 +00:00
ChangeLog.6
ChangeLog.7
ChangeLog.8
ChangeLog.9
ChangeLog.10
ChangeLog.11 2.5-18.1 2007-07-12 18:26:36 +00:00
ChangeLog.12 2.5-18.1 2007-07-12 18:26:36 +00:00
ChangeLog.13
ChangeLog.14
ChangeLog.15 Split out ChangeLog.15 at 2.3 branch point 2005-02-16 07:34:17 +00:00
ChangeLog.16 Fix typo in name 2012-06-21 16:45:27 +02:00
ChangeLog.17 Revert "Sun agreed to a change of the license for the RPC code to a BSD-like license." 2010-06-27 19:34:03 -07:00
ChangeLog.old-ports Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-aarch64 Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-aix Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-alpha Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-am33 Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-arm Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-cris Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-hppa Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-ia64 Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-linux-generic Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-m68k Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-microblaze Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-mips Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-powerpc Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
ChangeLog.old-ports-tile Move ports/ChangeLog* files to ChangeLog.old-ports*, remove ports/ directory. 2014-04-30 10:40:29 -07:00
config.h.in S390: configure check for vector instruction support in assembler. 2015-08-26 10:26:19 +02:00
config.make.in timezone: add a configure flag to disable program install 2015-09-18 19:39:46 -04:00
configure timezone: add a configure flag to disable program install 2015-09-18 19:39:46 -04:00
configure.ac timezone: add a configure flag to disable program install 2015-09-18 19:39:46 -04:00
CONFORMANCE Move __STDC_* predefined macros from features.h to stdc-predef.h. 2012-02-22 12:53:04 +00:00
COPYING Update to latest versions of GPL-2.0 and LGPL-2.1 2013-09-09 12:52:48 +10:00
COPYING.LIB Update to latest versions of GPL-2.0 and LGPL-2.1 2013-09-09 12:52:48 +10:00
cppflags-iterator.mk
extra-lib.mk Remove NOT_IN_libc 2014-11-24 15:03:45 +05:30
extra-modules.mk Remove NOT_IN_libc 2014-11-24 15:03:45 +05:30
gen-locales.mk Split locale generation snippet into a separate file 2015-05-13 13:05:28 +05:30
INSTALL timezone: add a configure flag to disable program install 2015-09-18 19:39:46 -04:00
libc-abis A few more archs have IFUNC support. 2010-03-17 02:43:12 -07:00
LICENSES Expand LICENSES file. 2012-12-05 21:56:15 +00:00
Makeconfig Don't use -Wno-error=undef. 2015-08-20 20:50:05 +00:00
Makefile Prevent check-local-headers.sh hang. 2015-09-14 09:57:58 -04:00
Makefile.in Remove redundant C locale settings. 2014-06-07 19:58:36 +00:00
Makerules Fix some places to use $(LN_S) makefile variable. 2015-07-08 14:21:41 -07:00
NAMESPACE
NEWS Harden putpwent, putgrent, putspent, putspent against injection [BZ #18724] 2015-10-02 11:34:13 +02:00
o-iterator.mk
PROJECTS
README Another pointless update in README. 2015-02-11 14:39:30 -08:00
Rules Let tests result in UNSUPPORTED; use that for unbuildable C++ cases 2015-03-10 15:13:14 -07:00
shlib-versions This is update for configure, build and install of vector math library. 2015-05-14 18:07:06 +03:00
test-skeleton.c test-skeleton: add usage information 2015-08-05 04:40:00 -04:00
version.h Open development for 2.23. 2015-08-05 03:01:50 -04:00
WUR-REPORT * posix/unistd.h (setuid, setreuid, seteuid, setresuid): 2012-08-01 18:12:58 +02:00

This directory contains the sources of the GNU C Library.
See the file "version.h" for what release version you have.

The GNU C Library is the standard system C library for all GNU systems,
and is an important part of what makes up a GNU system.  It provides the
system API for all programs written in C and C-compatible languages such
as C++ and Objective C; the runtime facilities of other programming
languages use the C library to access the underlying operating system.

In GNU/Linux systems, the C library works with the Linux kernel to
implement the operating system behavior seen by user applications.
In GNU/Hurd systems, it works with a microkernel and Hurd servers.

The GNU C Library implements much of the POSIX.1 functionality in the
GNU/Hurd system, using configurations i[4567]86-*-gnu.  The current
GNU/Hurd support requires out-of-tree patches that will eventually be
incorporated into an official GNU C Library release.

When working with Linux kernels, this version of the GNU C Library
requires Linux kernel version 2.6.32 or later.

Also note that the shared version of the libgcc_s library must be
installed for the pthread library to work correctly.

The GNU C Library supports these configurations for using Linux kernels:

	aarch64*-*-linux-gnu
	alpha*-*-linux-gnu
	arm-*-linux-gnueabi
	hppa-*-linux-gnu	Not currently functional without patches.
	i[4567]86-*-linux-gnu
	x86_64-*-linux-gnu	Can build either x86_64 or x32
	ia64-*-linux-gnu
	m68k-*-linux-gnu
	microblaze*-*-linux-gnu
	mips-*-linux-gnu
	mips64-*-linux-gnu
	powerpc-*-linux-gnu	Hardware or software floating point, BE only.
	powerpc64*-*-linux-gnu	Big-endian and little-endian.
	s390-*-linux-gnu
	s390x-*-linux-gnu
	sh[34]-*-linux-gnu
	sparc*-*-linux-gnu
	sparc64*-*-linux-gnu
	tilegx-*-linux-gnu
	tilepro-*-linux-gnu

If you are interested in doing a port, please contact the glibc
maintainers; see http://www.gnu.org/software/libc/ for more
information.

See the file INSTALL to find out how to configure, build, and install
the GNU C Library.  You might also consider reading the WWW pages for
the C library at http://www.gnu.org/software/libc/.

The GNU C Library is (almost) completely documented by the Texinfo manual
found in the `manual/' subdirectory.  The manual is still being updated
and contains some known errors and omissions; we regret that we do not
have the resources to work on the manual as much as we would like.  For
corrections to the manual, please file a bug in the `manual' component,
following the bug-reporting instructions below.  Please be sure to check
the manual in the current development sources to see if your problem has
already been corrected.

Please see http://www.gnu.org/software/libc/bugs.html for bug reporting
information.  We are now using the Bugzilla system to track all bug reports.
This web page gives detailed information on how to report bugs properly.

The GNU C Library is free software.  See the file COPYING.LIB for copying
conditions, and LICENSES for notices about a few contributions that require
these additional notices to be distributed.  License copyright years may be
listed using range notation, e.g., 1996-2015, indicating that every year in
the range, inclusive, is a copyrightable year that would otherwise be listed
individually.