1d4c55
commit a23820f6052a740246fdc7dcd9c43ce8eed0c45a
1d4c55
Author: Javier Pello <devel@otheo.eu>
1d4c55
Date:   Mon Sep 5 20:09:01 2022 +0200
1d4c55
1d4c55
    elf: Fix hwcaps string size overestimation
1d4c55
    
1d4c55
    Commit dad90d528259b669342757c37dedefa8577e2636 added glibc-hwcaps
1d4c55
    support for LD_LIBRARY_PATH and, for this, it adjusted the total
1d4c55
    string size required in _dl_important_hwcaps. However, in doing so
1d4c55
    it inadvertently altered the calculation of the size required for
1d4c55
    the power set strings, as the computation of the power set string
1d4c55
    size depended on the first value assigned to the total variable,
1d4c55
    which is later shifted, resulting in overallocation of string
1d4c55
    space. Fix this now by using a different variable to hold the
1d4c55
    string size required for glibc-hwcaps.
1d4c55
    
1d4c55
    Signed-off-by: Javier Pello <devel@otheo.eu>
1d4c55
1d4c55
diff --git a/elf/dl-hwcaps.c b/elf/dl-hwcaps.c
1d4c55
index 2fc4ae67a0f5d051..7ac27fd689187edc 100644
1d4c55
--- a/elf/dl-hwcaps.c
1d4c55
+++ b/elf/dl-hwcaps.c
1d4c55
@@ -193,7 +193,7 @@ _dl_important_hwcaps (const char *glibc_hwcaps_prepend,
1d4c55
   /* Each hwcaps subdirectory has a GLIBC_HWCAPS_PREFIX string prefix
1d4c55
      and a "/" suffix once stored in the result.  */
1d4c55
   hwcaps_counts.maximum_length += strlen (GLIBC_HWCAPS_PREFIX) + 1;
1d4c55
-  size_t total = (hwcaps_counts.count * (strlen (GLIBC_HWCAPS_PREFIX) + 1)
1d4c55
+  size_t hwcaps_sz = (hwcaps_counts.count * (strlen (GLIBC_HWCAPS_PREFIX) + 1)
1d4c55
 		  + hwcaps_counts.total_length);
1d4c55
 
1d4c55
   /* Count the number of bits set in the masked value.  */
1d4c55
@@ -229,11 +229,12 @@ _dl_important_hwcaps (const char *glibc_hwcaps_prepend,
1d4c55
   assert (m == cnt);
1d4c55
 
1d4c55
   /* Determine the total size of all strings together.  */
1d4c55
+  size_t total;
1d4c55
   if (cnt == 1)
1d4c55
-    total += temp[0].len + 1;
1d4c55
+    total = temp[0].len + 1;
1d4c55
   else
1d4c55
     {
1d4c55
-      total += temp[0].len + temp[cnt - 1].len + 2;
1d4c55
+      total = temp[0].len + temp[cnt - 1].len + 2;
1d4c55
       if (cnt > 2)
1d4c55
 	{
1d4c55
 	  total <<= 1;
1d4c55
@@ -255,6 +256,7 @@ _dl_important_hwcaps (const char *glibc_hwcaps_prepend,
1d4c55
   /* This is the overall result, including both glibc-hwcaps
1d4c55
      subdirectories and the legacy hwcaps subdirectories using the
1d4c55
      power set construction.  */
1d4c55
+  total += hwcaps_sz;
1d4c55
   struct r_strlenpair *overall_result
1d4c55
     = malloc (*sz * sizeof (*result) + total);
1d4c55
   if (overall_result == NULL)