SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d30e87ea49b2dc1dc6277ca447b0aaac03f49cde
systemd/src
T
History
Luca BoccassiandPaul Meyer d30e87ea49 uid-range: fix out-of-bounds write in uid_range_partition() 
uid_range_partition() filled the grown entries[] buffer backwards in
place. The backward-fill invariant (the write cursor stays above the
read index) only holds when every source entry contributes at least
one partition; an entry with nr < size contributes zero, so the cursor
stalls while the read index keeps descending. A later multi-part
entry's writes then overwrite the still-live zero-part slot, the
corrupted slot is re-read as a one-part entry, and the next
range->entries[--t] underflows.

Add a forward compaction first pass that drops the zero-part entries
before the backward fill.

Follow-up for 025439faaa

Co-Authored-by: Paul Meyer <katexochen0@gmail.com>
2026-06-25 10:28:54 +01:00
..
ac-power
…
analyze
analyze: fix SoftRebootsCount property signature
2026-06-11 09:43:09 +02:00
ask-password
ask-password: do not reuse flags across Varlink calls
2026-06-13 09:39:28 +01:00
backlight
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
basic
uid-range: fix out-of-bounds write in uid_range_partition()
2026-06-25 10:28:54 +01:00
battery-check
…
binfmt
options: get rid of "on_error" parameter to FOREACH_OPTION
2026-04-30 11:12:33 +01:00
bless-boot
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
boot
boot: read the TDX CPUID leaf unconditionally
2026-06-23 12:37:54 +02:00
bootctl
tree-wide: Beef up openssl logging
2026-06-22 11:40:57 +02:00
bpf
Various dlopen/linking cleanups from #42100 (#42166)
2026-05-19 08:54:27 +02:00
busctl
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
cgls
…
cgtop
cgtop: use cg helper to parse pids.current
2026-05-28 20:55:01 +01:00
core
bpf-restrict-fsaccess: move STAT_DEV_TO_KERNEL into generic code
2026-06-23 22:55:23 +02:00
coredump
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
coverage
…
creds
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
cryptenroll
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
cryptsetup
cryptsetup: Invalidate ineffective try_discover_key before trying
2026-06-19 15:23:21 +09:00
debug-generator
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
delta
…
detect-virt
…
dissect
loop-util: shortcut block device fd when it carries no partition table
2026-06-16 00:16:05 +01:00
environment-d-generator
…
escape
…
factory-reset
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
firstboot
creds,firstboot: add support for ? and $ via credentials
2026-06-20 14:26:41 +02:00
fsck
…
fstab-generator
misc: fix minor error handling issues
2026-06-16 11:44:08 +01:00
fundamental
confidential-virt: fix comment regarding vmm.c location
2026-06-23 12:43:00 +02:00
fuzz
pe-binary: bound section data against file size, cap UKI zero-padding hash, validate optional header size
2026-05-29 04:30:48 +09:00
getty-generator
…
gpt-auto-generator
gpt-auto-generator: fix error propagation in add_root_mount()
2026-06-16 10:26:23 +02:00
growfs
growfs: downgrade dependency on libcryptsetup to optional
2026-06-23 17:28:44 +01:00
hibernate-resume
…
home
homed: fix min_free tracking in manager_rebalance_calculate()
2026-06-22 22:06:05 +02:00
hostname
hostname: add $ hostname substitution and petnames
2026-06-20 14:26:41 +02:00
hwdb
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
id128
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
imds
imds: use help-util.h helpers for --help output
2026-06-22 22:03:12 +02:00
import
oci-util: fix and harden oci_registry_is_valid()
2026-06-22 21:59:15 +02:00
include
musl: fix build on 32-bit architecture
2026-06-15 14:15:46 +02:00
integritysetup
generator: order cryptsetup/verity/integrity after systemd-udevd
2026-06-20 23:38:26 +02:00
journal
journal: expose last 10 high priority logs as metrics
2026-06-23 12:41:38 +02:00
journal-remote
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
kernel-install
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
keyutil
tree-wide: Beef up openssl logging
2026-06-22 11:40:57 +02:00
libc
libc: dlsym the time64 alias for epoll_pwait2() on 32-bit _TIME_BITS=64
2026-05-24 15:00:37 +02:00
libsystemd
tree-wide: relax access mode of private Varlink sockets a bit
2026-06-23 23:10:02 +02:00
libsystemd-network
fuzz-dhcp-client: do not trigger assertion on building payload
2026-06-08 20:29:59 +01:00
libudev
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
locale
kbd-model-map: add Arabic mapping
2026-06-06 13:44:07 +01:00
login
pam_systemd: acquire inhibit lock when inhibit= is specified
2026-06-20 09:57:42 +01:00
machine
vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb
2026-06-13 15:54:50 +02:00
machine-id-setup
…
measure
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
modules-load
cpu-set-util: introduce cpus_online().
2026-05-14 08:12:28 +02:00
mount
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
mountfsd
…
mstack
…
mute-console
bootctl,mute-console,pcrextend,pcrlock,repart: allow connections from self
2026-05-05 17:23:16 +02:00
network
networkd: report per-interface addresses as io.systemd.Network.Address
2026-06-20 10:37:47 +02:00
notify
user-util: return malloc'ed strings in get_user_creds
2026-05-21 18:02:05 +02:00
nspawn
Add DLOPEN macros that stamp the caller's ELF and use it to ensure executables list their dlopen dependencies (#42398)
2026-06-02 18:05:34 +02:00
nsresourced
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
nss-myhostname
…
nss-mymachines
…
nss-resolve
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
nss-systemd
nss-systemd: avoid ELF TLS for recursion guard
2026-06-20 15:14:14 +02:00
oom
oom: use cgroup.kill if available (#42373)
2026-06-10 21:56:01 +02:00
path
…
pcrextend
pcrextend: refuse empty measurement over Varlink
2026-06-23 07:38:32 +02:00
pcrlock
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
portable
portablectl: use new EnqueueUnitJobMany() when available
2026-06-22 21:19:16 +01:00
pstore
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
ptyfwd
…
quotacheck
…
random-seed
random-seed: fix wrong error variable in log_error_errno()
2026-06-15 14:16:28 +02:00
remount-fs
…
repart
repart: Sort the partition list by partition offset (#42488)
2026-06-22 22:05:37 +02:00
reply-password
…
report
report: add systemd-report-sign-tsm backend
2026-06-22 20:42:35 +02:00
resolve
resolved: load libcrypto/libssl lazily on first use and make them optional (#42681)
2026-06-22 14:15:39 +01:00
rfkill
tree-wide: use device_get_sysattr_safe_string()
2026-05-18 02:55:56 +09:00
rpm
…
run
run0: add -n/--non-interactive as alias to --no-ask-password
2026-06-20 09:55:02 +01:00
run-generator
…
sbsign
tree-wide: Beef up openssl logging
2026-06-22 11:40:57 +02:00
shared
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
shutdown
shutdown: do not delay VM shutdown (#42396)
2026-06-03 16:10:20 +02:00
sleep
tree-wide: use device_get_sysattr_unsigned() and friends
2026-05-18 02:55:56 +09:00
socket-activate
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
socket-proxy
socket-proxy: implement PROXY protocol v1
2026-05-20 04:29:59 +09:00
ssh-generator
vsock-util: allow VMADDR_CID_ANY as local CID if enabled in hwdb
2026-06-13 15:54:50 +02:00
stdio-bridge
…
storage
recurse-dir: optionally, only enumerate dentries of a specific type
2026-06-22 14:40:16 +02:00
storagetm
misc: fix minor error handling issues
2026-06-16 11:44:08 +01:00
sulogin-shell
…
sysctl
…
sysext
sysext: Allow to (re)start units from extension-release metadata file
2026-06-19 22:15:43 +02:00
sysinstall
firstboot: make clear where the full screen console wizards end
2026-05-21 09:09:38 +09:00
system-update-generator
…
systemctl
core: add socket xattr settings for socket unit
2026-06-23 22:55:23 +02:00
systemd
journal: add catalog message for missing dlopen dep
2026-06-22 10:54:49 +01:00
sysupdate
sysupdate: automatically clean up orphaned files after auto-update
2026-06-24 10:42:16 +02:00
sysusers
sysext,sysusers: fix wrong error variable in two error paths
2026-06-17 08:32:51 +02:00
test
uid-range: fix out-of-bounds write in uid_range_partition()
2026-06-25 10:28:54 +01:00
timedate
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
timesync
meson: drop libdl, threads, and librt dependencies
2026-05-18 21:17:38 +00:00
tmpfiles
tmpfiles: add %D specifier resolution
2026-06-21 18:20:53 +01:00
tpm2-setup
tpm2-setup: call DLOPEN_TPM2 to add dependency and fail immediately if not present
2026-06-23 18:37:42 +02:00
tty-ask-password-agent
tree-wide: standardize header names across src/fundamental, src/basic and src/shared
2026-05-21 10:33:03 +09:00
udev
tree-wide: relax access mode of private Varlink sockets a bit
2026-06-23 23:10:02 +02:00
ukify
ukify: honor UKI/SBAT from config files
2026-06-04 17:13:03 +02:00
update-done
…
update-utmp
tree-wide: get rid of old dispatch_verb
2026-05-16 18:37:10 +02:00
user-sessions
…
userdb
user-record-nss: preserve valid nss lookup aliases in records
2026-06-15 16:54:35 +03:00
validatefs
tree-wide: convert dlopen_*() callers to DLOPEN_* wrapper macros
2026-06-01 18:46:24 +01:00
varlinkctl
varlinkctl: add 'list-sockets' verb
2026-06-23 23:10:01 +02:00
vconsole
vconsole-util: move code to read EFI keyboard layout into generic code
2026-05-20 16:34:21 +02:00
veritysetup
veritysetup: don't measure root hash signature after unsigned fallback
2026-06-22 17:29:50 +02:00
version
…
vmspawn
tree-wide: relax access mode of private Varlink sockets a bit
2026-06-23 23:10:02 +02:00
volatile-root
tree-wide: normalize comment style
2025-12-15 08:50:13 +09:00
vpick
…
xdg-autostart-generator
…