[Bug libc/24021] New: intl: verify mo files harder

[bruno at clisp dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=24021

            Bug ID: 24021
           Summary: intl: verify mo files harder
           Product: glibc
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: libc
          Assignee: unassigned at sourceware dot org
          Reporter: bruno at clisp dot org
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---

Created attachment 11484
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11484&action=edit
fix

During the loading of .mo files, loadmsgcat.c currently does not verify that
there is a NUL byte at the end of the system-dependent segments. I believe that
passing a crafted .mo file to glibc could lead to a buffer overrun, in the
worst case.

ChangeLog entry:

2017-09-24  Bruno Haible  <bruno@clisp.org>

intl: Verify that system dependent strings in .mo files are NUL terminated.

Reported by Jakub Wilk <jwilk@jwilk.net> in
<https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876498>.

* intl/loadmsgcat.c (_nl_load_domain): Bail out if some of the system-dependent
strings has a last static segment that is not NUL terminated.

-- 
You are receiving this mail because:
You are on the CC list for the bug.