[PATCH] locale directory traversal (CVE-2014-0475, bug 17137)

[Florian Weimer]

These patches fix a security vulnerability reported privately by 
Stephane Chazelas.  Pre-notification was sent out through linux-distros. 
  I'd like to thank Stephane for reporting these issues, and Carlos for 
reviewing my patches.

Before committing, I will add the bug number to the NEWS file and the 
ChangeLog.  For obvious reasons, I did not have a bug number when I 
prepared those patches.

The meat of the fixes is in the second patch.  The first one is just the 
usual alloca hardening (technically not covered by the CVE assignment), 
and the third patch consists solely of documentation updates.

-- 
Florian Weimer / Red Hat Product Security
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-setlocale-Use-the-heap-for-the-copy-of-the-locale-ar.patch
Type: text/x-patch
Size: 2304 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20140709/b95ac710/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-_nl_find_locale-Improve-handling-of-crafted-locale-n.patch
Type: text/x-patch
Size: 13256 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20140709/b95ac710/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-manual-Update-the-locale-documentation.patch
Type: text/x-patch
Size: 10811 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20140709/b95ac710/attachment-0002.bin>