[PATCH v6] libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling

Florian Weimer fweimer@redhat.com
Fri Sep 4 11:20:49 GMT 2026


* 손동균:

> * Florian Weimer:
>
> Thank you for verifying and resending the patch!
>
> I have confirmed that the formatting in v6 is correct:
>
> ✓ The condition statement is correctly unified: `if (ccs[2] == '\0' || __wcsmbs_named_conv(&fcts, ccs) != 0)`
> ✓ The upstr() fallback has been completely removed
> ✓ The comments are clear and accurate
> ✓ All file changes are correct (libio/fileops.c only, no test changes as discussed)
>
> The patch is ready for merging.

Sorry, I was primiarly asking about the commit author:

From: 손동균/Process & Infra Lab(SR)/삼성전자 <dongkyun.s@samsung.com>

Is this formatted correctly?

Thanks,
Florian



More information about the Libc-alpha mailing list