Re: tst-setlocale3 failure when backported to glibc-2.19

[Florian Weimer <fweimer at redhat dot com>]

On 08/28/2014 02:10 PM, Siddhesh Poyarekar wrote:
> On 28 August 2014 17:37, Allan McRae <mcrae_allan@hotmail.com> wrote:
> > I am trying to backport the fix for CVE-2014-0475/BZ#17137 (directory
> > traversal in locale-related environment variables) to glibc-2.19.  See
> > the allan/2.19/backport branch (which I intend to merge to the 2.19
> > release branch soon).
> >
> > However, the added test with this fix - tst-setlocale3 - is failing:
> >
> > $ cat glibc-build/localedata/tst-setlocale3.out
> > setlocale for "/en_US.UTF-8": No such file or directory
> >
> > I do not see this for the master branch.  Is there something else I need
> > to backport for this to work, or is my backport broken for other reasons?
>
> You need to backport the patch that sets LOCPATH for all tests:
>
> commit 2bf1804182cc4bd671193587c8d5e3de45a9618e
> Author: Joseph Myers <joseph@codesourcery.com>
> Date:   Wed Jun 4 23:37:25 2014 +0000
>
>      Include LOCPATH in default test environment.

Alternatively, add this line to localedata/Makefile:

tst-setlocale3-ENV = LOCPATH=$(common-objpfx)localedata

--
Florian Weimer / Red Hat Product Security