Re: [SECURITY] libidn - locale specific error in test suite

2017-05-03 Thread Yaakov Selkowitz
On 2017-03-24 14:00, Yaakov Selkowitz wrote: On 2017-03-10 16:01, Yaakov Selkowitz wrote: On 2017-02-22 12:58, Yaakov Selkowitz wrote: On 2017-01-19 14:42, Yaakov Selkowitz wrote: On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in

Re: [SECURITY] libidn - locale specific error in test suite

2017-03-24 Thread Yaakov Selkowitz
On 2017-03-10 16:01, Yaakov Selkowitz wrote: On 2017-02-22 12:58, Yaakov Selkowitz wrote: On 2017-01-19 14:42, Yaakov Selkowitz wrote: On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in the test suite (Which was working fine with m

Re: [SECURITY] libidn - locale specific error in test suite

2017-03-10 Thread Yaakov Selkowitz
On 2017-02-22 12:58, Yaakov Selkowitz wrote: On 2017-01-19 14:42, Yaakov Selkowitz wrote: On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in the test suite (Which was working fine with my latest build). When running under strace I g

Re: [SECURITY] libidn - locale specific error in test suite

2017-03-10 Thread Yaakov Selkowitz
On 2017-02-22 12:58, Yaakov Selkowitz wrote: On 2017-01-19 14:42, Yaakov Selkowitz wrote: On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in the test suite (Which was working fine with my latest build). When running under strace I g

Re: [SECURITY] libidn - locale specific error in test suite

2017-02-22 Thread Yaakov Selkowitz
On 2017-01-19 14:42, Yaakov Selkowitz wrote: On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in the test suite (Which was working fine with my latest build). When running under strace I get: Dr. Volker, Since the bug discovered by

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-20 Thread Corinna Vinschen
On Jan 19 15:17, Eric Blake wrote: > On 01/19/2017 03:02 PM, Corinna Vinschen wrote: > After stepping through a debugger, it looks like this is a bug in gnulib > and not cygwin. Gnulib is trying to test that its own function > gl_locale_name() can track the use of uselocale() to set

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Eric Blake
On 01/19/2017 03:02 PM, Corinna Vinschen wrote: After stepping through a debugger, it looks like this is a bug in gnulib and not cygwin. Gnulib is trying to test that its own function gl_locale_name() can track the use of uselocale() to set a thread-local locale that overrides

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Corinna Vinschen
On Jan 19 14:17, Eric Blake wrote: > On 01/19/2017 12:19 PM, Corinna Vinschen wrote: > > >>> The test comes from gnulib, so I'm familiar with ideas on how to try and > >>> whittle it down to a smaller self-contained test. I'll see if I can > >>> spend a moment on it today. > >>> > >> > >> After s

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Yaakov Selkowitz
On 2017-01-03 04:53, Dr. Volker Zell wrote: Just tried packaging libidn-1.33 and found a locale specific error in the test suite (Which was working fine with my latest build). When running under strace I get: Dr. Volker, Since the bug discovered by this test is unrelated to libidn itself, the

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Eric Blake
On 01/19/2017 12:19 PM, Corinna Vinschen wrote: >> I'll propose a patch to upstream gnulib, and cc this list - any project >> using gnulib will have to backport that patch or wait for a new upstream >> release of that project that uses newer gnulib if it wants to work >> around the bug. > > Thanks

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Eric Blake
On 01/19/2017 12:19 PM, Corinna Vinschen wrote: >>> The test comes from gnulib, so I'm familiar with ideas on how to try and >>> whittle it down to a smaller self-contained test. I'll see if I can >>> spend a moment on it today. >>> >> >> After stepping through a debugger, it looks like this is a

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Corinna Vinschen
On Jan 19 11:40, Eric Blake wrote: > On 01/18/2017 09:23 AM, Eric Blake wrote: > > On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: > > > > The source code can be found in the file (after unpacking of > https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) > > o > .../lib

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Eric Blake
On 01/18/2017 09:23 AM, Eric Blake wrote: > On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: > The source code can be found in the file (after unpacking of https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) o .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-lo

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-19 Thread Corinna Vinschen
On Jan 18 09:23, Eric Blake wrote: > On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: > > >>> > >>> The source code can be found in the file (after unpacking of > >>> https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) > >>> > >>> o > >>> .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-loc

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-18 Thread Eric Blake
On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: >>> >>> The source code can be found in the file (after unpacking of >>> https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) >>> >>> o >>> .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-localename.c >> >> Do you have a self-contained testca

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-18 Thread Dr. Volker Zell
On 09.01.2017 15:26, Corinna Vinschen wrote: On Jan 3 11:53, Dr. Volker Zell wrote: On 29.12.2016 21:49, Yaakov Selkowitz wrote: On 2016-09-30 01:43, Dr. Volker Zell wrote: Yaakov Selkowitz writes: > Dr. Volker, > Several security vulnerabilities have been announced for libidn, whic

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-09 Thread Corinna Vinschen
On Jan 3 11:53, Dr. Volker Zell wrote: > On 29.12.2016 21:49, Yaakov Selkowitz wrote: > > On 2016-09-30 01:43, Dr. Volker Zell wrote: > > > > > > > > Yaakov Selkowitz writes: > > > > > > > Dr. Volker, > > > > Several security vulnerabilities have been announced for > > > libidn, which are

Re: [SECURITY] libidn - locale specific error in test suite

2017-01-03 Thread Dr. Volker Zell
On 29.12.2016 21:49, Yaakov Selkowitz wrote: On 2016-09-30 01:43, Dr. Volker Zell wrote: Yaakov Selkowitz writes: > Dr. Volker, > Several security vulnerabilities have been announced for libidn, which are fixed > in 1.33: > https://lists.gnu.org/archive/html/help-libidn/201

Re: [SECURITY] libidn

2016-12-29 Thread Yaakov Selkowitz
On 2016-09-30 01:43, Dr. Volker Zell wrote: Yaakov Selkowitz writes: > Dr. Volker, > Several security vulnerabilities have been announced for libidn, which are fixed > in 1.33: > https://lists.gnu.org/archive/html/help-libidn/2016-07/msg9.html Noted (and also your other m

Re: [SECURITY] libidn

2016-09-29 Thread Dr. Volker Zell
> Yaakov Selkowitz writes: > Dr. Volker, > Several security vulnerabilities have been announced for libidn, which are fixed > in 1.33: > https://lists.gnu.org/archive/html/help-libidn/2016-07/msg9.html Noted (and also your other mails), will work on it as soon as real wo

[SECURITY] libidn

2016-09-26 Thread Yaakov Selkowitz
Dr. Volker, Several security vulnerabilities have been announced for libidn, which are fixed in 1.33: https://lists.gnu.org/archive/html/help-libidn/2016-07/msg9.html -- Yaakov