glibc/locale
DJ Delorie ef21bd2d8c loadarchive: guard against locale-archive corruption (Bug #25115)
_nl_load_locale_from_archive() checks for a zero size, but
divides by both (size) and (size-2).  Extend the check to
guard against a size of two or less.

Tested by manually corrupting locale-archive and running a program
that calls setlocale() with LOCPATH unset (size is typically very
large).

Reviewed-by: Carlos O'Donell <carlos@redhat.com>
2019-10-18 20:40:54 -04:00
..
bits Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
programs Regenerate charmap-kw.h, locfile-kw.h 2019-09-09 14:16:40 -07:00
broken_cur_max.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C_name.c Update. 2001-04-06 17:49:18 +00:00
C-address.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-collate.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-ctype.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-identification.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-measurement.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-messages.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-monetary.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-name.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-numeric.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-paper.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-telephone.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-time.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
C-translit.h.in Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
categories.def Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
coll-lookup.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
coll-lookup.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
duplocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
elem-hash.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
findlocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
freelocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
gen-translit.py Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
global-locale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
hashval.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
indigits.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
indigitswc.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
iso-639.def Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
iso-3166.def Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
iso-4217.def Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
langinfo.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-address.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-collate.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-ctype.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-identification.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-measurement.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-messages.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-monetary.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-name.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-numeric.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-paper.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-telephone.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
lc-time.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
loadarchive.c loadarchive: guard against locale-archive corruption (Bug #25115) 2019-10-18 20:40:54 -04:00
loadlocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
locale.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
localeconv.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
localeinfo.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
localename.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
locarchive.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
Makefile Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
mb_cur_max.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
newlocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
nl_langinfo_l.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
nl_langinfo.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
outdigits.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
outdigitswc.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
setlocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
strlen-hash.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
SYS_libc.c [BZ #284, BZ #721] 2005-02-17 01:19:55 +00:00
tst-C-locale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
tst-duplocale.c Add missing test files. 2009-11-17 16:23:57 -08:00
tst-locale-locpath.sh Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
tst-locname.c Add missing test files. 2009-11-17 16:23:57 -08:00
uselocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
Versions * sysdeps/ia64/dl-fptr.c (__ia64_make_fptr): Revert last change. 2003-03-03 09:45:25 +00:00
weight.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
weightwc.h Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00
xlocale.c Prefer https to http for gnu.org and fsf.org URLs 2019-09-07 02:43:31 -07:00