svn commit: r349622 - stable/12/lib/libc/iconv
Ed Maste
emaste at FreeBSD.org
Wed Jul 3 00:01:39 UTC 2019
Author: emaste
Date: Wed Jul 3 00:01:38 2019
New Revision: 349622
URL: https://svnweb.freebsd.org/changeset/base/349622
Log:
MFC r349619: libc: correct iconv buffer overflow
admbugs: 920
Submitted by: Andrea Venturoli, gabor
Reported by: Andrea Venturoli <security at netfence.it>, NetFence
Approved by: so
Security: CVE-2019-5600
Security: FreeBSD-SA-19:09.iconv
Modified:
stable/12/lib/libc/iconv/citrus_none.c
Directory Properties:
stable/12/ (props changed)
Modified: stable/12/lib/libc/iconv/citrus_none.c
==============================================================================
--- stable/12/lib/libc/iconv/citrus_none.c Wed Jul 3 00:00:39 2019 (r349621)
+++ stable/12/lib/libc/iconv/citrus_none.c Wed Jul 3 00:01:38 2019 (r349622)
@@ -144,7 +144,7 @@ _citrus_NONE_stdenc_cstomb(struct _citrus_stdenc * __r
s[2] = (char)(idx >> 16);
*nresult = 3;
} else {
- if (n < 3) {
+ if (n < 4) {
*nresult = (size_t)-1;
return (E2BIG);
}
More information about the svn-src-all
mailing list