Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 3 Jul 2019 00:03:14 +0000 (UTC)
From:      Ed Maste <emaste@FreeBSD.org>
To:        src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-stable@freebsd.org, svn-src-stable-11@freebsd.org
Subject:   svn commit: r349624 - stable/11/lib/libc/iconv
Message-ID:  <201907030003.x6303Eqt051294@repo.freebsd.org>

next in thread | raw e-mail | index | archive | help
Author: emaste
Date: Wed Jul  3 00:03:14 2019
New Revision: 349624
URL: https://svnweb.freebsd.org/changeset/base/349624

Log:
  MFC r349619: libc: correct iconv buffer overflow
  
  admbugs:	920
  Submitted by:	Andrea Venturoli, gabor
  Reported by:	Andrea Venturoli <security@netfence.it>, NetFence
  Approved by:	so
  Security:	CVE-2019-5600
  Security:	FreeBSD-SA-19:09.iconv

Modified:
  stable/11/lib/libc/iconv/citrus_none.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/lib/libc/iconv/citrus_none.c
==============================================================================
--- stable/11/lib/libc/iconv/citrus_none.c	Wed Jul  3 00:02:16 2019	(r349623)
+++ stable/11/lib/libc/iconv/citrus_none.c	Wed Jul  3 00:03:14 2019	(r349624)
@@ -142,7 +142,7 @@ _citrus_NONE_stdenc_cstomb(struct _citrus_stdenc * __r
 		s[2] = (char)(idx >> 16);
 		*nresult = 3;
 	} else {
-		if (n < 3) {
+		if (n < 4) {
 			*nresult = (size_t)-1;
 			return (E2BIG);
 		}



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201907030003.x6303Eqt051294>