[PATCH v3 2/3] iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489)

[Carlos O'Donell]

On 8/27/26 7:58 AM, Florian Weimer wrote:
> This fixes bug 34568.

LGTM. The distinctly fixable second CVE in similar code.

Reviewed-by: Carlos O'Donell <carlos@redhat.com>

> ---
> v3: Split into separate bugs with distinct CVE IDs, as requested.
>   iconvdata/euc-jisx0213.c | 3 +++
>   1 file changed, 3 insertions(+)
> 
> diff --git a/iconvdata/euc-jisx0213.c b/iconvdata/euc-jisx0213.c
> index 5572bbdb7b..61c22231e1 100644
> --- a/iconvdata/euc-jisx0213.c
> +++ b/iconvdata/euc-jisx0213.c
> @@ -224,6 +224,9 @@
>   	    STANDARD_FROM_LOOP_ERR_HANDLER (1);				      \
>   	  }								      \
>         }									      \
> +    else 								      \
> +      /* There was a pending character.  Clear it.  */			      \
> +      *statep = 0;							      \
>   									      \
>       put32 (outptr, ch);							      \
>       outptr += 4;							      \


-- 
Cheers,
Carlos.