[Bug libc/23448] New: Out of bounds access in IBM-1390 converter

["schwab at linux-m68k dot org" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=23448

            Bug ID: 23448
           Summary: Out of bounds access in IBM-1390 converter
           Product: glibc
           Version: 2.26
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
          Assignee: unassigned at sourceware dot org
          Reporter: schwab@linux-m68k.org
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---

This was revealed by gcc 9:

In file included from ibm1390.c:35:
../iconv/skeleton.c: In function ‘gconv’:
ibm1364.c:263:11: error: array subscript 1 is outside array bounds of ‘unsigned
char[4]’ [-Werror=array-bounds]
  uint32_t ch_next = get32 (inptr + 4);          \
           ^~~~~~~
ibm1364.c:321:5: note: in expansion of macro ‘SUB_COMBINED_UCS_TO_IBM13XX’
     SUB_COMBINED_UCS_TO_IBM13XX;           \
     ^~~~~~~~~~~~~~~~~~~~~~~~~~~
../iconv/loop.c:446:7: note: in expansion of macro ‘BODY’
       BODY
       ^~~~

This is due to a missing MAX_NEEDED_INPUT definition for the TO_LOOP.

-- 
You are receiving this mail because:
You are on the CC list for the bug.