[Bug 295991] lib/libc posix_spawnp(): PATH-search child runs on an undersized rfork_thread stack and underflows into the caller's heap (heavily-linked processes; PHP proc_open)
Date: Mon, 06 Jul 2026 01:07:15 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=295991
--- Comment #14 from commit-hook@FreeBSD.org ---
A commit in branch stable/15 references this bug:
URL:
https://cgit.FreeBSD.org/src/commit/?id=682ebe10032d4e682381eb5f108a8297be7b682c
commit 682ebe10032d4e682381eb5f108a8297be7b682c
Author: Konstantin Belousov <kib@FreeBSD.org>
AuthorDate: 2026-06-27 15:11:37 +0000
Commit: Konstantin Belousov <kib@FreeBSD.org>
CommitDate: 2026-07-06 01:05:50 +0000
rtld: stop using unbound alloca()
PR: 295991
(cherry picked from commit 1e370f038778e16c4b31f8992dda339d429e5cb8)
libexec/rtld-elf/map_object.c | 4 ++-
libexec/rtld-elf/rtld.c | 82 ++++++++++++++++++++++++++++++-------------
libexec/rtld-elf/rtld.h | 2 ++
3 files changed, 63 insertions(+), 25 deletions(-)
--
You are receiving this mail because:
You are the assignee for the bug.