CVS commit: src/lib/libc/time

["Christos Zoulas" <christos%netbsd.org@localhost>]

Module Name:    src
Committed By:   christos
Date:           Sun Apr 26 14:25:23 UTC 2026

Modified Files:
        src/lib/libc/time: NEWS tz-art.html tz-link.html version zic.c

Log Message:
Update to 2026b, previous was 2026a

Release 2026b - 2026-04-22 23:06:43 -0700

  Changes to code

    zic no longer mishandles a last transition to a new time type.

    zic no longer overflows a buffer when generating a TZ string like
    "PST-167:59:58PDT-167:59:59,M11.5.6/-167:59:59,M12.5.6/-167:59:59",
    which can occur with adversarial input.  (Thanks to Naveed Khan.)

    zic no longer generates a longer TZif file than necessary when
    an earlier time zone abbreviation is a suffix of a later one.
    As a nice side effect, zic no longer overflows a buffer when given
    a long series of abbreviations, each a suffix of the next.
    (Buffer overflow reported by Arthur Chan.)

    zic no longer overflows an int when processing input like `Zone
    Ouch 2147483648:00:00 - LMT'.  The int overflow can lead to
    buffer overflow in adversarial cases.  (Thanks to Naveed Khan.)

    zic now checks for signals more often.


To generate a diff of this commit:
cvs rdiff -u -r1.49 -r1.50 src/lib/libc/time/NEWS
cvs rdiff -u -r1.16 -r1.17 src/lib/libc/time/tz-art.html
cvs rdiff -u -r1.21 -r1.22 src/lib/libc/time/tz-link.html
cvs rdiff -u -r1.30 -r1.31 src/lib/libc/time/version
cvs rdiff -u -r1.99 -r1.100 src/lib/libc/time/zic.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.