From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 7096 invoked by alias); 19 Jan 2017 18:19:45 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 7070 invoked by uid 89); 19 Jan 2017 18:19:44 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-101.6 required=5.0 tests=AWL,BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_LOW,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=know, Hx-languages-length:1848, know!, H*F:D*cygwin.com X-HELO: drew.franken.de Received: from mail-n.franken.de (HELO drew.franken.de) (193.175.24.27) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 19 Jan 2017 18:19:34 +0000 Received: from aqua.hirmke.de (aquarius.franken.de [193.175.24.89]) (Authenticated sender: aquarius) by mail-n.franken.de (Postfix) with ESMTPSA id 7D507721E2822 for ; Thu, 19 Jan 2017 19:19:31 +0100 (CET) Received: from calimero.vinschen.de (calimero.vinschen.de [192.168.129.6]) by aqua.hirmke.de (Postfix) with ESMTP id D03FD5E0212 for ; Thu, 19 Jan 2017 19:19:30 +0100 (CET) Received: by calimero.vinschen.de (Postfix, from userid 500) id B5F9EA805FC; Thu, 19 Jan 2017 19:19:30 +0100 (CET) Date: Thu, 19 Jan 2017 18:19:00 -0000 From: Corinna Vinschen To: cygwin-apps@cygwin.com Subject: Re: [SECURITY] libidn - locale specific error in test suite Message-ID: <20170119181930.GC25162@calimero.vinschen.de> Reply-To: cygwin-apps@cygwin.com Mail-Followup-To: cygwin-apps@cygwin.com References: <90dee62a-dc34-f83a-7094-8e0df688d801@cygwin.com> <20381568-c93e-1517-0f3d-579a5e6ac3fa@volkerzell.de> <20170109142640.GC843@calimero.vinschen.de> <86acc3c1-23ff-d76c-f7c8-c3cefcd567fa@volkerzell.de> <39d8753c-c875-0910-8ce8-5464d09b8235@redhat.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="TiqCXmo5T1hvSQQg" Content-Disposition: inline In-Reply-To: <39d8753c-c875-0910-8ce8-5464d09b8235@redhat.com> User-Agent: Mutt/1.7.1 (2016-10-04) X-SW-Source: 2017-01/txt/msg00026.txt.bz2 --TiqCXmo5T1hvSQQg Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 1845 On Jan 19 11:40, Eric Blake wrote: > On 01/18/2017 09:23 AM, Eric Blake wrote: > > On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: > >=20 > >>>> > >>>> The source code can be found in the file (after unpacking of > >>>> https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) > >>>> > >>>> o > >>>> .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-localename= .c > >>> > >>> Do you have a self-contained testcase, by any chance? > >> > >> No, just the testcase from the testsuite in libidn. > >=20 > > The test comes from gnulib, so I'm familiar with ideas on how to try and > > whittle it down to a smaller self-contained test. I'll see if I can > > spend a moment on it today. > >=20 >=20 > After stepping through a debugger, it looks like this is a bug in gnulib > and not cygwin. Gnulib is trying to test that its own function > gl_locale_name() can track the use of uselocale() to set a thread-local > locale that overrides the global locale. It has platform specific code > for various platforms (glibc uses nl_langinfo(), BSD uses querylocale(), > Sun uses getlocalename_l() - surprisingly none of the platforms use > nl_langinfo_l()!), then falls back to probing the environment. As long > as cygwin lacked uselocale(), then probing the environment was correct. > But now that cygwin supports uselocale(), the gnulib code needs to add a > cygwin-specific clause to its list of various platform methods. >=20 > I'll propose a patch to upstream gnulib, and cc this list - any project > using gnulib will have to backport that patch or wait for a new upstream > release of that project that uses newer gnulib if it wants to work > around the bug. Thanks for letting us know! Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --TiqCXmo5T1hvSQQg Content-Type: application/pgp-signature; name="signature.asc" Content-length: 819 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJYgQMyAAoJEPU2Bp2uRE+gDiYQAJo3dA5U/00UQYdHBQWnjwrn UAnnhOrBqUPvW7AK82kwYlU0VF38sT3jW9Kg0QmLUdqJXzLVagieT8YKj+WiNUhv yBQK0/EI+i/GorUGi4I6bqJSN3qq95Tb5DXDCHQhRYbprjULUChHH2OwHva2ynGW jftS81JPZ/+OAVPej+Ked5pUO4YE9uiY+HqOv9DEN88RafN0TZonIf5fK6yve9Sk ZHp2JmhrKmwoxoJDB4QURZbAql/JN5lmPzMDK2PChCNuekMkMdvatTDtPvNsIg4C gCjuMnJerJ5AtVQUO1fJY8TwThh3jWlrcvD6LEKf+HoeBdxNBVC3fB7ZznM+uYaz l2eVqjpgrMu2ipkfcLiJ3P9Eq04zpDp/eUxPbhoi7PoSR+nINFFqxEypoJcrOYxA d1O1Huo6bhR7kGD06gUNEVlIHI6GUx523c0mMgAzbJLNtFXT8u49Uw/J5ndMAMtK b3T9J8pgCCvnxrZx7U8JhpgIZJwB/0VfEZbDlxMbzF1/9j7El9lkgI9qBWjmyVQ4 f9kXlyhZj5n51aQFqN+k+HW0alTgajX1AUvwOIatst5NvRhFmAiWZ+Je8O0XAnKW 4TiEebNHk9przHfIpeynUU5s6Ei7b/x8x2lfIPVqDlCc4yg7qBSiWpDklLLrnjDw /kKdc+a/6sH9GWOTnQFy =kH0+ -----END PGP SIGNATURE----- --TiqCXmo5T1hvSQQg--