mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-25 14:30:06 +00:00
Check tzspec_len == 0 in __tzfile_read
[BZ#18333] * time/tzset.c (__tzfile_read): Check tzspec_len == 0.
This commit is contained in:
parent
cc8dcf96e7
commit
5cffc05ed5
@ -1,3 +1,8 @@
|
|||||||
|
2015-04-27 H.J. Lu <hongjiu.lu@intel.com>
|
||||||
|
|
||||||
|
[BZ#18333]
|
||||||
|
* time/tzset.c (__tzfile_read): Check tzspec_len == 0.
|
||||||
|
|
||||||
2015-04-27 Florian Weimer <fweimer@redhat.com>
|
2015-04-27 Florian Weimer <fweimer@redhat.com>
|
||||||
|
|
||||||
[BZ#18333]
|
[BZ#18333]
|
||||||
|
@ -270,7 +270,8 @@ __tzfile_read (const char *file, size_t extra, char **extrap)
|
|||||||
if (__glibc_unlikely (tzspec_len == 0 || tzspec_len - 1 < num_isgmt))
|
if (__glibc_unlikely (tzspec_len == 0 || tzspec_len - 1 < num_isgmt))
|
||||||
goto lose;
|
goto lose;
|
||||||
tzspec_len -= num_isgmt + 1;
|
tzspec_len -= num_isgmt + 1;
|
||||||
if (__glibc_unlikely (SIZE_MAX - total_size < tzspec_len))
|
if (__glibc_unlikely (tzspec_len == 0
|
||||||
|
|| SIZE_MAX - total_size < tzspec_len))
|
||||||
goto lose;
|
goto lose;
|
||||||
}
|
}
|
||||||
if (__glibc_unlikely (SIZE_MAX - total_size - tzspec_len < extra))
|
if (__glibc_unlikely (SIZE_MAX - total_size - tzspec_len < extra))
|
||||||
|
Loading…
Reference in New Issue
Block a user