[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [bug-gettext] intl: Proof against invalid offset/length

From: Florian Weimer
Subject: Re: [bug-gettext] intl: Proof against invalid offset/length
Date: Fri, 20 Mar 2015 10:10:09 +0100
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0

On 03/20/2015 02:06 AM, Daiki Ueno wrote:

> I agree.  Now that intl/ is almost[1] synchronized with gettext, what's
> blocking this?  I'm happy to include the patch in the upcoming gettext
> release so non-glibc consumers also benefit from it.

The patch will use getauxval(AT_SECURE) or __libc_enable_secure (or
issetuugid on other systems, but which I cannot test).  It is not going
to be very portable.

Florian Weimer / Red Hat Product Security

reply via email to

[Prev in Thread] Current Thread [Next in Thread]