elf: Compute correct array size in _dl_init_paths [BZ #22606]

1 files changed, 8 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 49fcee95db..521ef46b99 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,13 @@
 2017-12-14  Florian Weimer  <fweimer@redhat.com>
 
+	[BZ #22606]
+	CVE-2017-1000408
+	* elf/dl-load.c (system_dirs): Update comment.
+	(nsystem_dirs_len): Use array_length.
+	(_dl_init_paths): Use nsystem_dirs_len to compute the array size.
+
+2017-12-14  Florian Weimer  <fweimer@redhat.com>
+
 	Simplify compiling most of support/ outside of glibc.
 	* support/check_addrinfo.c: Include <string.h>.
 	* support/check_dns_packet.c: Likewise.