[PATCH v2] Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)

Andreas Schwab schwab@suse.de
Tue Apr 7 14:45:43 GMT 2026


On Apr 07 2026, Florian Weimer wrote:

> Follow the example in iso-2022-jp-3.c and use the __count state
> variable to store the pending character.  This avoids restarting
> the conversion if the output buffer ends between two 4-byte UCS-4
> code points, so that the assert reported in the bug can no longer
> happen.
>
> Even though the fix is applied to ibm1364.c, the change is only
> effective for the two HAS_COMBINED codecs for IBM1390, IBM1399.

Ok.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."


More information about the Libc-alpha mailing list