00db10
From 4fa8ae49aa169fb8d97882938e8bee3ed9ce5410 Mon Sep 17 00:00:00 2001
00db10
From: DJ Delorie <dj@delorie.com>
00db10
Date: Fri, 14 Jul 2017 21:46:42 -0400
00db10
Subject: [PATCH] Fix BZ #21654 - grp-merge.c alignment
00db10
00db10
* grp/grp_merge.c (__copy_grp): Align char** to minimum pointer
00db10
alignment not char alignment.
00db10
(__merge_grp): Likewise.
00db10
---
00db10
 ChangeLog       |  7 +++++++
00db10
 grp/grp-merge.c | 16 ++++++++++++++++
00db10
 2 files changed, 23 insertions(+)
00db10
00db10
diff --git a/grp/grp-merge.c b/grp/grp-merge.c
00db10
index 77c494d..6590e5d 100644
00db10
--- a/grp/grp-merge.c
00db10
+++ b/grp/grp-merge.c
00db10
@@ -85,6 +85,14 @@ __copy_grp (const struct group srcgrp, const size_t buflen,
00db10
     }
00db10
   members[i] = NULL;
00db10
 
00db10
+  /* Align for pointers.  We can't simply align C because we need to
00db10
+     align destbuf[c].  */
00db10
+  if ((((uintptr_t)destbuf + c) & (__alignof__(char **) - 1)) != 0)
00db10
+    {
00db10
+      uintptr_t mis_align = ((uintptr_t)destbuf + c) & (__alignof__(char **) - 1);
00db10
+      c += __alignof__(char **) - mis_align;
00db10
+    }
00db10
+
00db10
   /* Copy the pointers from the members array into the buffer and assign them
00db10
      to the gr_mem member of destgrp.  */
00db10
   destgrp->gr_mem = (char **) &destbuf[c];
00db10
@@ -168,6 +176,14 @@ __merge_grp (struct group *savedgrp, char *savedbuf, char *savedend,
00db10
   /* Add the NULL-terminator.  */
00db10
   members[savedmemcount + memcount] = NULL;
00db10
 
00db10
+  /* Align for pointers.  We can't simply align C because we need to
00db10
+     align savedbuf[c].  */
00db10
+  if ((((uintptr_t)savedbuf + c) & (__alignof__(char **) - 1)) != 0)
00db10
+    {
00db10
+      uintptr_t mis_align = ((uintptr_t)savedbuf + c) & (__alignof__(char **) - 1);
00db10
+      c += __alignof__(char **) - mis_align;
00db10
+    }
00db10
+
00db10
   /* Copy the member array back into the buffer after the member list and free
00db10
      the member array.  */
00db10
   savedgrp->gr_mem = (char **) &savedbuf[c];
00db10
-- 
00db10
1.8.3.1
00db10