[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [bug-gettext] intl: Proof against invalid offset/length
|
From: |
Florian Weimer |
|
Subject: |
Re: [bug-gettext] intl: Proof against invalid offset/length |
|
Date: |
Fri, 20 Mar 2015 10:10:09 +0100 |
|
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 |
On 03/20/2015 02:06 AM, Daiki Ueno wrote:
> I agree. Now that intl/ is almost[1] synchronized with gettext, what's
> blocking this? I'm happy to include the patch in the upcoming gettext
> release so non-glibc consumers also benefit from it.
The patch will use getauxval(AT_SECURE) or __libc_enable_secure (or
issetuugid on other systems, but which I cannot test). It is not going
to be very portable.
--
Florian Weimer / Red Hat Product Security
- [bug-gettext] intl: Proof against invalid offset/length, Daiki Ueno, 2015/03/11
- Re: [bug-gettext] intl: Proof against invalid offset/length, Carlos O'Donell, 2015/03/11
- Re: [bug-gettext] intl: Proof against invalid offset/length, Mike Frysinger, 2015/03/11
- Re: [bug-gettext] intl: Proof against invalid offset/length, Bruno Haible, 2015/03/11
- Re: [bug-gettext] intl: Proof against invalid offset/length, Florian Weimer, 2015/03/13
- Re: [bug-gettext] intl: Proof against invalid offset/length, Carlos O'Donell, 2015/03/13
- Re: [bug-gettext] intl: Proof against invalid offset/length, Daiki Ueno, 2015/03/19
- Re: [bug-gettext] intl: Proof against invalid offset/length,
Florian Weimer <=
- Re: [bug-gettext] intl: Proof against invalid offset/length, Daiki Ueno, 2015/03/20
- Re: [bug-gettext] intl: Proof against invalid offset/length, Florian Weimer, 2015/03/23