diff options
| author | Florian Weimer <fweimer@redhat.com> | 2015-04-24 17:34:47 +0200 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2015-04-24 17:34:48 +0200 |
| commit | 42261ad731991df345880b0b509d83b0b9a9b9d8 (patch) | |
| tree | 440bf43dca45a9002402ec602f0deaf3bfa6e3e3 /ChangeLog | |
| parent | ed159672eb3cd650a32b7e5cb4d5ec1fe0e63802 (diff) | |
| download | glibc-42261ad731991df345880b0b509d83b0b9a9b9d8.tar.gz glibc-42261ad731991df345880b0b509d83b0b9a9b9d8.tar.xz glibc-42261ad731991df345880b0b509d83b0b9a9b9d8.zip | |
Make time zone file parser more robust [BZ #17715]
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog index f515a2a43e..dbafd866f5 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,32 @@ 2015-04-24 Florian Weimer <fweimer@redhat.com> + [BZ #17715] + * time/tzfile.c (__tzfile_read): Check for large values of + tzh_ttisstdcnt and tzh_ttisgmtcnt. Use malloc instead of alloca. + * time/tzset.c (__tzstring_len): New function, based on the old + __tzstring function. + (__tzstring): Call __tzstring_len. + (parse_tzname): New helper function extracted from + __tzset_parse_tz. Call __tzstring_len, without making a copy of + the input string. + (parse_offset): New helper function extracted from + __tzset_parse_tz. Replace switch with fallthrough with + initialization before sscanf. + (parse_rule): Likewise. + (__tzset_parse_tz): Rewrite using the new helper functions. Use + new-style function definition. + * timezone/Makefile (tests): Add tst-tzset. + (tst-tzset.out): Dependencies on time zone files. + (tst-tzset-ENV): Set TZDIR. + (testdata/XT%): Copy crafted time zone files. + * timezone/README: Mention crafted time zone files. + * timezone/testdata/XT1, timezone/testdata/XT2, + timezone/testdata/XT3, timezone/testdata/XT4: New time zone test + files. + * timezone/tst-tzset.c: New test. + +2015-04-24 Florian Weimer <fweimer@redhat.com> + * Makeconfig (+gccwarn): Remove -Winline. 2015-04-24 Stefan Liebler <stli@linux.vnet.ibm.com> |