[bug-gettext] intl: Proof against invalid offset/length

[Florian Weimer]

On 03/12/2015 02:04 AM, Bruno Haible wrote:

> But these arguments don't consider the LANGUAGE variable. The original
> intent of LANGUAGE was that it contains colon-separated language or locale
> identifiers. But in fact, you can specify relative files names that start
> with "../", and thus you can make the _nl_load_domain function in glibc
> access files anywhere in the file system.

Yes, this is bug 17142.

-- 
Florian Weimer / Red Hat Product Security