Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: basesrc/lib/libc/locale



Module Name:    basesrc
Committed By:   tshiozak
Date:           Fri Aug  2 07:12:52 UTC 2002

Modified Files:
        basesrc/lib/libc/locale: setlocale.c

Log Message:
fix a bug of setlocale when changing locales with LC_ALL for the first
argunemt and with a string containing many slashes for the second argument.
This bug may cause setlocale() to destroy static datas.

If a setuid program calls this function as 'setlocale(LC_ALL, "");',
this might be vulnerable, although there are few programs having such
vulnerability.  This bug probably affects every versions of NetBSD,
including 1.4, 1.5 and 1.6.

XXX: This part of setlocale is unseemly, thus we had better rewrite it in
the future.


To generate a diff of this commit:
cvs rdiff -r1.37 -r1.38 basesrc/lib/libc/locale/setlocale.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index