This is the mail archive of the glibc-bugs@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug stdio/20632] Buffer overflow in wchar IO (_IO_wfile_overflow)


https://sourceware.org/bugzilla/show_bug.cgi?id=20632

Paul Pluzhnikov <ppluzhnikov at google dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2016-10-03
                 CC|                            |ppluzhnikov at google dot com
     Ever confirmed|0                           |1

--- Comment #1 from Paul Pluzhnikov <ppluzhnikov at google dot com> ---
The test program hangs for me using 2.19-0ubuntu6.9:

(gdb) bt
#0  __lll_lock_wait_private () at
../nptl/sysdeps/unix/sysv/linux/x86_64/lowlevellock.S:95
#1  0x00007ffff7a8cc11 in _L_lock_48 () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007ffff7a8cb36 in fputws (str=0x4007e8 L"0123456789ABCDEF",
fp=0x7ffff7dd41c0 <_IO_2_1_stderr_>) at iofputws.c:38
#3  0x0000000000400731 in main () at t.c:18


When using my own build of libc-2.19, I do get a crash when i==21:

Program received signal SIGSEGV, Segmentation fault.
0x0000003400000033 in ?? ()
(gdb) bt
#0  0x0000003400000033 in ?? ()
#1  0x000000000040072b in main () at t.c:23

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]