diff options
| author | Szabolcs Nagy <szabolcs.nagy@arm.com> | 2022-09-26 15:38:19 +0100 |
|---|---|---|
| committer | Szabolcs Nagy <szabolcs.nagy@arm.com> | 2022-10-27 14:46:47 +0100 |
| commit | dd9ec10913da97c0a5b64f5fd9ac195a61ef13b1 (patch) | |
| tree | 37f24cdff22a8dd33a7b7561b7ae1963c5e65af1 /malloc/alloc_buffer_alloc_array.c | |
| parent | adeba2c19ae48a833cbf09267666e44c2375f2b4 (diff) | |
| download | glibc-dd9ec10913da97c0a5b64f5fd9ac195a61ef13b1.tar.xz glibc-dd9ec10913da97c0a5b64f5fd9ac195a61ef13b1.zip | |
Fix off-by-one OOB write in iconv/tst-iconv-mt
The iconv buffer sizes must not include the \0 string terminator.
When \0 cannot be part of a valid character encoding glibc iconv
would copy it to the output as expected, but then later the explicit
output termination with *outbufpos = '\0' is out of bounds.
Diffstat (limited to 'malloc/alloc_buffer_alloc_array.c')
0 files changed, 0 insertions, 0 deletions