Blame SOURCES/glibc-rh809602.patch

b40826
diff -rup a/nscd/nscd_getserv_r.c b/nscd/nscd_getserv_r.c
b40826
--- a/nscd/nscd_getserv_r.c	2012-04-04 16:37:27.873951850 -0600
b40826
+++ b/nscd/nscd_getserv_r.c	2012-04-04 16:37:49.904837348 -0600
b40826
@@ -124,6 +123,7 @@ nscd_getserv_r (const char *crit, size_t
b40826
 	  s_name = (char *) (&found->data[0].servdata + 1);
b40826
 	  serv_resp = found->data[0].servdata;
b40826
 	  s_proto = s_name + serv_resp.s_name_len;
b40826
+	  alloca_aliases_len = 1;
b40826
 	  aliases_len = (uint32_t *) (s_proto + serv_resp.s_proto_len);
b40826
 	  aliases_list = ((char *) aliases_len
b40826
 			  + serv_resp.s_aliases_cnt * sizeof (uint32_t));
b40826
@@ -154,7 +154,9 @@ nscd_getserv_r (const char *crit, size_t
b40826
 				     + (serv_resp.s_aliases_cnt
b40826
 					* sizeof (uint32_t)));
b40826
 	      if (alloca_aliases_len)
b40826
-		tmp = __alloca (serv_resp.s_aliases_cnt * sizeof (uint32_t));
b40826
+		tmp = alloca_account (serv_resp.s_aliases_cnt
b40826
+				      * sizeof (uint32_t),
b40826
+				      alloca_used);
b40826
 	      else
b40826
 		{
b40826
 		  tmp = malloc (serv_resp.s_aliases_cnt * sizeof (uint32_t));
b40826
@@ -249,8 +251,9 @@ nscd_getserv_r (const char *crit, size_t
b40826
 				     + (serv_resp.s_aliases_cnt
b40826
 					* sizeof (uint32_t)));
b40826
 	      if (alloca_aliases_len)
b40826
-		aliases_len = alloca (serv_resp.s_aliases_cnt
b40826
-				      * sizeof (uint32_t));
b40826
+		aliases_len = alloca_account (serv_resp.s_aliases_cnt
b40826
+					      * sizeof (uint32_t),
b40826
+					      alloca_used);
b40826
 	      else
b40826
 		{
b40826
 		  aliases_len = malloc (serv_resp.s_aliases_cnt
b40826
@@ -368,7 +371,11 @@ nscd_getserv_r (const char *crit, size_t
b40826
 	}
b40826
 
b40826
       if (retval != -1)
b40826
-	goto retry;
b40826
+	{
b40826
+	  if (!alloca_aliases_len)
b40826
+	    free ((void *) aliases_len);
b40826
+	  goto retry;
b40826
+	}
b40826
     }
b40826
 
b40826
   if (!alloca_aliases_len)