[PATCH] Fix crashes on invalid input in IBM gconv modules [BZ #17325]

Florian Weimer fweimer@redhat.com
Fri Aug 29 12:13:00 GMT 2014


These changes are based on the fix for BZ #14134 in commit 
6e230d11837f3ae7b375ea69d7905f0d18eb79e5.  My analysis showed that the 
0xffff case was impossible with certain character sets, so I added 
asserts there.

Tested on master with no failures.

I will request CVE IDs (for this fix and the 2012 commit) on oss-security.

-- 
Florian Weimer / Red Hat Product Security
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fix-crashes-on-invalid-input-in-IBM-gconv-modules-BZ.patch
Type: text/x-patch
Size: 7268 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20140829/de100dcd/attachment.bin>


More information about the Libc-alpha mailing list