This is the mail archive of the
glibc-bugs@sourceware.org
mailing list for the glibc project.
[Bug time/16346] mktime: potentially unsafe use of localtime_offset
- From: "eggert at cs dot ucla.edu" <sourceware-bugzilla at sourceware dot org>
- To: glibc-bugs at sourceware dot org
- Date: Sun, 02 Sep 2018 10:00:38 +0000
- Subject: [Bug time/16346] mktime: potentially unsafe use of localtime_offset
- Auto-submitted: auto-generated
- References: <bug-16346-131@http.sourceware.org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=16346
eggert at cs dot ucla.edu changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |eggert at cs dot ucla.edu
--- Comment #1 from eggert at cs dot ucla.edu ---
Thanks for reporting the problem. I inspected the Gnulib (upstream) version of
mktime and verified that the race could cause a signed integer overflow, which
is undefined behavior. I installed the following patch into Gnulib:
http://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=1cb440df7dd28fc93c965ec7fb2d4745eb361393
and when this is copied into glibc (see Bug#23603) that should fix the bug in
glibc too.
--
You are receiving this mail because:
You are on the CC list for the bug.