glibc 2.21 发布,安全修复和性能提升

glibc 发布 2.21 版本,下载地址:

详细改进内容:

*Thefollowingbugsareresolvedwiththisrelease:6652,10672,12674,12847,12926,13862,14132,14138,14171,14498,15215,15378,15884,16009,16418,16191,16469,16576,16617,16618,16619,16657,16740,16857,17192,17266,17273,17344,17363,17370,17371,17411,17460,17475,17485,17501,17506,17508,17522,17555,17570,17571,17572,17573,17574,17582,17583,17584,17585,17589,17594,17601,17608,17616,17625,17630,17633,17634,17635,17647,17653,17657,17658,17664,17665,17668,17682,17702,17717,17719,17722,17723,17724,17725,17732,17733,17744,17745,17746,17747,17748,17775,17777,17780,17781,17782,17791,17793,17796,17797,17801,17803,17806,17834,17844,17848,17868,17869,17870,17885,17892.*CVE-2015-1472Undercertainconditionswscanfcanallocatetoolittlememoryfortheto-be-scannedargumentsandoverflowtheallocatedbuffer.Theimplementationnowcorrectlycomputestherequiredbuffersizewhenusingmalloc.*AnewsemaphorealgorithmhasbeenimplementedingenericCcodeforallmachines.Previouscustomassemblyimplementationsofsemaphoreweredifficulttoreasonaboutorensurethattheyweresafe.Thenewversionofsemaphoresupportsmachineswith64-bitor32-bitatomicoperations.Thenewsemaphorealgorithmisusedbysem_init,sem_open,sem_post,sem_wait,sem_timedwait,sem_trywait,andsem_getvalue.*PorttoAlteraNiosIIhasbeencontributedbyMentorGraphics.*Optimizedstrcpy,stpcpy,strncpy,stpncpy,strcmp,andstrncmpimplementationsforpowerpc64/powerpc64le.ImplementedbyAdhemervalZanella(IBM).*AddedsupportforTSXlockelisionofpthreadmutexesonpowerpc32,powerpc64andpowerpc64le.ThismayimprovelockscalingofexistingprogramsonHTMcapablesystems.Thelockelisioncodeisonlyenabledwith–enable-lock-elision=yes.Also,theTSXlockelisionimplementationforpowerpcwillissueatransactionabortoneverysyscalltoavoidsideeffectsbeingvisibleoutsidetransactions.*Optimizedstrcpy,stpcpy,strchrnulandstrrchrimplementationsforAArch64.ContributedbyARMLtd.*i386memcpyfunctionsoptimizedwithSSE2unalignedload/store.*CVE-2104-7817ThewordexpfunctioncouldignoretheWRDE_NOCMDflagundercertaininputconditionsresultingintheexecutionofashellforcommandsubstitutionwhentheapplicaitondidnotrequestit.TheimplementationnowchecksWRDE_NOCMDimmediatelybeforeexecutingtheshellandreturnstheerrorWRDE_CMDSUBasexpected.*CVE-2012-3406printf-stylefunctionscouldrunintoastackoverflowwhenprocessingformatstringswithalargenumberofformatspecifiers.*CVE-2014-9402Thenss_dnsimplementationofgetnetbynamecouldrunintoaninfiniteloopiftheDNSresponsecontainedaPTRrecordofanunexpectedformat.*TheminimumGCCversionthatcanbeusedtobuildthisversionoftheGNUCLibraryisGCC4.6.OlderGCCversions,andnon-GNUcompilers,canstillbeusedtocompileprogramsusingtheGNUCLibrary.*TheGNUCLibraryisnowbuiltwith-Werrorbydefault.Thiscanbedisabledbyconfiguringwith–disable-werror.*Newlocales:tu_IN,bh_IN,raj_IN,ce_RU.*Theobsoletesigvecfunctionhasbeenremoved.Thiswastheoriginal4.2BSDinterfacethatinspiredthePOSIX.1sigactioninterface,whichprogramshavebeenusinginsteadforabout25years.Ofcourse,ABIcompatibilityforoldbinariesusingsigvecremainsintact.*Mergedgettext0.19.3intotheintlsubdirectory.Thisfixesbuildingwithnewerversionsofbison.*SupportforMIPSo32FPXX,FP64AandFP64ABIExtensions.TheoriginalMIPSo32hard-floatABIrequiresanFPUwheredouble-precisionregistersoverlaytwoconsecutivesingle-precisionregisters.MIPS32R2introducedanewFPUmode(FR=1)wheredouble-precisionregistersextendthecorrespondingsingle-precisionregisterswhichisincompatiblewiththeo32hard-floatABI.TheMIPSSIMDASEandtheMIPSR6architecturebothrequiretheuseofFR=1makingatransitionnecessary.Newo32ABIextensionsenableuserstomigrateovertimefromtheoriginalo32ABIthroughtotheupdatedo32FP64ABI.ToachievethisthedynamiclinkernowtrackstheABIofanyloadedobjectandverifiesthatnewobjectsarecompatible.Modetransitionswillalsoberequestedasrequiredandunsupportableobjectswillberejected.TheABIchecksincludebothsoftandhardfloatABIsforo32,n32andn64.GCC5withGNUbinutils2.25onwards:Itisstronglyrecommendedthatallo32systemlibrariesarebuiltusingthenewo32FPXXABI(-mfpxx)tofacilitatethetransitionasthisiscompatiblewiththeoriginalandallnewo32ABIextensions.ConfigureaMIPSGCCcompilerusing–with-fp-32=xxtosetthisbydefault.

,自己不喜欢的人,可以报之以沉默微笑;

glibc 2.21 发布,安全修复和性能提升

相关文章:

你感兴趣的文章:

标签云: