misc/tst-syslog-long-progname.c

   1 /* Test heap buffer overflow in syslog with long __progname (CVE-2023-6246)
   2    Copyright (C) 2023 Free Software Foundation, Inc.
   3    This file is part of the GNU C Library.
   4
   5    The GNU C Library is free software; you can redistribute it and/or
   6    modify it under the terms of the GNU Lesser General Public
   7    License as published by the Free Software Foundation; either
   8    version 2.1 of the License, or (at your option) any later version.
   9
  10    The GNU C Library is distributed in the hope that it will be useful,
  11    but WITHOUT ANY WARRANTY; without even the implied warranty of
  12    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  13    Lesser General Public License for more details.
  14
  15    You should have received a copy of the GNU Lesser General Public
  16    License along with the GNU C Library; if not, see
  17    <https://www.gnu.org/licenses/>.  */
  18
  19 #include <syslog.h>
  20 #include <string.h>
  21
  22 extern char * __progname;
  23
  24 static int
  25 do_test (void)
  26 {
  27   char long_progname[2048];
  28
  29   memset (long_progname, 'X', sizeof (long_progname) - 1);
  30   long_progname[sizeof (long_progname) - 1] = '\0';
  31
  32   __progname = long_progname;
  33
  34   syslog (LOG_INFO, "Hello, World!");
  35
  36   return 0;
  37 }
  38
  39 #include <support/test-driver.c>