]> git.ipfire.org Git - thirdparty/coreutils.git/commit
date,touch: test and document large TZ security issue
authorPádraig Brady <P@draigBrady.com>
Thu, 27 Apr 2017 03:51:39 +0000 (20:51 -0700)
committerPádraig Brady <P@draigBrady.com>
Thu, 27 Apr 2017 04:49:12 +0000 (21:49 -0700)
commit9287ef2b1707e2a222f8ae776ce3785abcb16fba
treea31846b8471f140a9a40ea9e83b1b5c44e28ed46
parent5d4be52a982e253276eef714a6aed61082aa3db7
date,touch: test and document large TZ security issue

Add a test for CVE-2017-7476 which was fixed in gnulib at:
http://git.sv.gnu.org/gitweb/?p=gnulib.git;a=commitdiff;h=94e01571

* tests/misc/date-tz.sh: Add a new test which overwrites enough
of the heap to trigger a segfault, even without ASAN enabled.
* tests/local.mk: Reference the new test.
* NEWS: Mention the bug fix.
NEWS
tests/local.mk
tests/misc/date-tz.sh [new file with mode: 0755]