[Bug 295991] lib/libc posix_spawnp(): PATH-search child runs on an undersized rfork_thread stack and underflows into the caller's heap (heavily-linked processes; PHP proc_open)

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 06 Jul 2026 01:07:15 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295991

--- Comment #14 from commit-hook@FreeBSD.org ---
A commit in branch stable/15 references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=682ebe10032d4e682381eb5f108a8297be7b682c

commit 682ebe10032d4e682381eb5f108a8297be7b682c
Author:     Konstantin Belousov <kib@FreeBSD.org>
AuthorDate: 2026-06-27 15:11:37 +0000
Commit:     Konstantin Belousov <kib@FreeBSD.org>
CommitDate: 2026-07-06 01:05:50 +0000

    rtld: stop using unbound alloca()

    PR:     295991

    (cherry picked from commit 1e370f038778e16c4b31f8992dda339d429e5cb8)

 libexec/rtld-elf/map_object.c |  4 ++-
 libexec/rtld-elf/rtld.c       | 82 ++++++++++++++++++++++++++++++-------------
 libexec/rtld-elf/rtld.h       |  2 ++
 3 files changed, 63 insertions(+), 25 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.