Subject: CVS commit: [netbsd-1-6] basesrc/lib/libc/locale
To: None <source-changes@netbsd.org>
From: Luke Mewburn <lukem@netbsd.org>
List: source-changes
Date: 08/03/2002 19:17:03
Module Name: basesrc
Committed By: lukem
Date: Sat Aug 3 16:17:03 UTC 2002
Modified Files:
basesrc/lib/libc/locale [netbsd-1-6]: setlocale.c
Log Message:
Pull up revision 1.38 (requested by tshiozak in ticket #619):
fix a bug of setlocale when changing locales with LC_ALL for the first
argunemt and with a string containing many slashes for the second argument.
This bug may cause setlocale() to destroy static datas.
If a setuid program calls this function as 'setlocale(LC_ALL, "");',
this might be vulnerable, although there are few programs having such
vulnerability. This bug probably affects every versions of NetBSD,
including 1.4, 1.5 and 1.6.
XXX: This part of setlocale is unseemly, thus we had better rewrite it in
the future.
To generate a diff of this commit:
cvs rdiff -r1.37 -r1.37.2.1 basesrc/lib/libc/locale/setlocale.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.