[Bug locale/19519] iconv(1) with -c option hangs on illegal multi-byte sequences (CVE-2016-10228)
shane.seymour at hpe dot com
sourceware-bugzilla@sourceware.org
Thu Apr 6 23:35:00 GMT 2017
https://sourceware.org/bugzilla/show_bug.cgi?id=19519
--- Comment #9 from Shane Seymour <shane.seymour at hpe dot com> ---
Sorry I should add that the IBM930 example was just that (an example). That's
an illustration of a downstream issue not upstream since that code has been
changed for that conversion to ignore duplicate shift in shift out characters.
The same general class of issues exists in other things though. Should the
conversion routines be allowed to return errors when told to ignore them (or if
they do they can't return with the input pointer unchanged so forward progress
can always be guaranteed).
--
You are receiving this mail because:
You are on the CC list for the bug.
More information about the Glibc-bugs
mailing list