This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug locale/19519] iconv(1) with -c option hangs on illegal multi-byte sequences (CVE-2016-10228)
- From: "shane.seymour at hpe dot com" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Thu, 06 Apr 2017 23:35:24 +0000
- Subject: [Bug locale/19519] iconv(1) with -c option hangs on illegal multi-byte sequences (CVE-2016-10228)
- Auto-submitted: auto-generated
- References: <bug-19519-131@http.sourceware.org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=19519
--- Comment #9 from Shane Seymour <shane.seymour at hpe dot com> ---
Sorry I should add that the IBM930 example was just that (an example). That's
an illustration of a downstream issue not upstream since that code has been
changed for that conversion to ignore duplicate shift in shift out characters.
The same general class of issues exists in other things though. Should the
conversion routines be allowed to return errors when told to ignore them (or if
they do they can't return with the input pointer unchanged so forward progress
can always be guaranteed).
--
You are receiving this mail because:
You are on the CC list for the bug.