AuroraMiddleware/glibc
1
0
Fork 0
mirror of https://sourceware.org/git/glibc.git synced 2024-11-14 01:00:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
b9e8c90875
glibc/string/tst-strcoll-overflow.c

55 lines
1.7 KiB
C
Raw Normal View History

Update copyright dates with scripts/update-copyrights.
2017-01-01 00:14:16 +00:00
/* Copyright (C) 2013-2017 Free Software Foundation, Inc.
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
This file is part of the GNU C Library.
The GNU C Library is free software; you can redistribute it and/or
modify it under the terms of the GNU Lesser General Public
License as published by the Free Software Foundation; either
version 2.1 of the License, or (at your option) any later version.
The GNU C Library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Lesser General Public License for more details.
You should have received a copy of the GNU Lesser General Public
License along with the GNU C Library; if not, see
<http://www.gnu.org/licenses/>. */
#include <locale.h>
#include <stdio.h>
#include <stdint.h>
#include <stdlib.h>
#include <string.h>
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
#include <support/check.h>
#include <support/test-driver.h>
/* Verify that strcoll does not crash for large strings for which it
cannot cache weight lookup results. The size is large enough to
cause integer overflows on 32-bit as well as buffer overflows on
64-bit. */
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
#define SIZE 0x40000000ul
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
static int
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
do_test (void)
{
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
TEST_VERIFY_EXIT (setlocale (LC_COLLATE, "en_GB.UTF-8") != NULL);
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
char *p = malloc (SIZE);
if (p == NULL)
{
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
puts ("info: could not allocate memory, cannot run test");
return EXIT_UNSUPPORTED;
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
}
memset (p, 'x', SIZE - 1);
p[SIZE - 1] = 0;
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
printf ("info: strcoll result: %d\n", strcoll (p, p));
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
return 0;
}
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
/* This test can rung for a long time, but it should complete within
this time on reasonably current hardware. */
Check for integer overflow in cache size computation in strcoll strcoll is implemented using a cache for indices and weights of collation sequences in the strings so that subsequent passes do not have to search through collation data again. For very large string inputs, the cache size computation could overflow. In such a case, use the fallback function that does not cache indices and weights of collation sequences. Fixes CVE-2012-4412.
2013-09-23 05:54:30 +00:00
#define TIMEOUT 300
string/tst-strcoll-overflow: Do not accept timeout as test result The test completes within 300 seconds if enough memory is available.
2017-01-25 15:27:03 +00:00
#include <support/test-driver.c>
Reference in New Issue Copy Permalink