[committed] regex: fix uninitialized memory access
Florian Weimer
fweimer@redhat.com
Tue Aug 28 11:00:00 GMT 2018
On 08/27/2018 11:11 PM, Paul Eggert wrote:
> I introduced this bug into gnulib in commit
> 8335a4d6c7b4448cd0bcb6d0bebf1d456bcfdb17 dated 2006-04-10;
> eventually it was merged into glibc. The bug was found by
> project-repo<bugs@feusi.co> and reported here:
> https://lists.gnu.org/r/sed-devel/2018-08/msg00017.html
> Diagnosis and draft fix reported by Assaf Gordon here:
> https://lists.gnu.org/r/bug-gnulib/2018-08/msg00071.html
> https://lists.gnu.org/r/bug-gnulib/2018-08/msg00142.html
> * posix/regex_internal.c (build_wcs_upper_buffer):
> Fix bug when mbrtowc returns 0.
This bug affects glibc after all. I'm attaching a test which I want to
commit to master and backport to 2.28, along with the fix.
Thanks,
Florian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-regex-Add-test-tst-regcomp-truncated-BZ-23578.patch
Type: text/x-patch
Size: 8787 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20180828/f0ebc7d9/attachment.bin>
More information about the Libc-alpha
mailing list