[SECURITY] libidn - locale specific error in test suite
Dr. Volker Zell
lists@volkerzell.de
Wed Jan 18 12:13:00 GMT 2017
On 09.01.2017 15:26, Corinna Vinschen wrote:
> On Jan 3 11:53, Dr. Volker Zell wrote:
>> On 29.12.2016 21:49, Yaakov Selkowitz wrote:
>>> On 2016-09-30 01:43, Dr. Volker Zell wrote:
>>>>>>>>> Yaakov Selkowitz writes:
>>>>
>>>> > Dr. Volker,
>>>> > Several security vulnerabilities have been announced for
>>>> libidn, which are fixed
>>>> > in 1.33:
>>>>
>>>> >
>>>> https://lists.gnu.org/archive/html/help-libidn/2016-07/msg00009.html
>>>>
>>>> Noted (and also your other mails), will work on it as soon as real
>>>> work permits.
>>>
>>> Ping?
>>>
>>
>> Hi
>>
>> Just tried packaging libidn-1.33 and found a locale specific error in the
>> test suite (Which was working fine with my latest build). When running under
>> strace I get:
>> [...]
>> : 37 4387 [main] test-localename 11148 write: 1 = write(2, 0x1004060B9,
>> 1)
>> 183 32 4419 [main] test-localename 11148 write: 3 = write(2,
>> 0xFFFFC9F1, 3)
>> : assertion ' 30 4449 [main] test-localename 11148 write: 13 = write(2,
>> 0x1004060BC, 13)
>> strcmp (name, "fr_FR.UTF-8") == 0 30 4479 [main] test-localename 11148
>> write: 33 = write(2, 0x100406168, 33)
>> ' failed
>> [...]
>>
>> The source code can be found in the file (after unpacking of
>> https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz)
>>
>> o .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-localename.c
>
> Do you have a self-contained testcase, by any chance?
No, just the testcase from the testsuite in libidn.
Ciao
Volker
More information about the Cygwin-apps
mailing list