From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 16553 invoked by alias); 19 Jan 2017 17:40:46 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 16538 invoked by uid 89); 19 Jan 2017 17:40:46 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-5.1 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD,SPF_HELO_PASS autolearn=ham version=3.3.2 spammy=bsd X-HELO: mx1.redhat.com Received: from mx1.redhat.com (HELO mx1.redhat.com) (209.132.183.28) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 19 Jan 2017 17:40:35 +0000 Received: from int-mx13.intmail.prod.int.phx2.redhat.com (int-mx13.intmail.prod.int.phx2.redhat.com [10.5.11.26]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id B669976E2 for ; Thu, 19 Jan 2017 17:40:35 +0000 (UTC) Received: from [10.10.117.52] (ovpn-117-52.rdu2.redhat.com [10.10.117.52]) by int-mx13.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id v0JHeYoV008262 for ; Thu, 19 Jan 2017 12:40:35 -0500 Subject: Re: [SECURITY] libidn - locale specific error in test suite To: cygwin-apps@cygwin.com References: <90dee62a-dc34-f83a-7094-8e0df688d801@cygwin.com> <20381568-c93e-1517-0f3d-579a5e6ac3fa@volkerzell.de> <20170109142640.GC843@calimero.vinschen.de> <86acc3c1-23ff-d76c-f7c8-c3cefcd567fa@volkerzell.de> From: Eric Blake Openpgp: url=http://people.redhat.com/eblake/eblake.gpg Message-ID: <39d8753c-c875-0910-8ce8-5464d09b8235@redhat.com> Date: Thu, 19 Jan 2017 17:40:00 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="lhSS9WK4nax4imaBQWxoFc2X4hku8g6wF" X-IsSubscribed: yes X-SW-Source: 2017-01/txt/msg00025.txt.bz2 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --lhSS9WK4nax4imaBQWxoFc2X4hku8g6wF Content-Type: multipart/mixed; boundary="VpwPEDJhcSxwHDD2DjwLTDf1TSJ5ohucH"; protected-headers="v1" From: Eric Blake To: cygwin-apps@cygwin.com Message-ID: <39d8753c-c875-0910-8ce8-5464d09b8235@redhat.com> Subject: Re: [SECURITY] libidn - locale specific error in test suite References: <90dee62a-dc34-f83a-7094-8e0df688d801@cygwin.com> <20381568-c93e-1517-0f3d-579a5e6ac3fa@volkerzell.de> <20170109142640.GC843@calimero.vinschen.de> <86acc3c1-23ff-d76c-f7c8-c3cefcd567fa@volkerzell.de> In-Reply-To: --VpwPEDJhcSxwHDD2DjwLTDf1TSJ5ohucH Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-length: 1659 On 01/18/2017 09:23 AM, Eric Blake wrote: > On 01/18/2017 06:12 AM, Dr. Volker Zell wrote: >=20 >>>> >>>> The source code can be found in the file (after unpacking of >>>> https://ftp.gnu.org/gnu/libidn/libidn-1.33.tar.gz) >>>> >>>> o >>>> .../libidn-1.33-1.x86_64/src/libidn-1.33/lib/gltests/test-localename.c >>> >>> Do you have a self-contained testcase, by any chance? >> >> No, just the testcase from the testsuite in libidn. >=20 > The test comes from gnulib, so I'm familiar with ideas on how to try and > whittle it down to a smaller self-contained test. I'll see if I can > spend a moment on it today. >=20 After stepping through a debugger, it looks like this is a bug in gnulib and not cygwin. Gnulib is trying to test that its own function gl_locale_name() can track the use of uselocale() to set a thread-local locale that overrides the global locale. It has platform specific code for various platforms (glibc uses nl_langinfo(), BSD uses querylocale(), Sun uses getlocalename_l() - surprisingly none of the platforms use nl_langinfo_l()!), then falls back to probing the environment. As long as cygwin lacked uselocale(), then probing the environment was correct. But now that cygwin supports uselocale(), the gnulib code needs to add a cygwin-specific clause to its list of various platform methods. I'll propose a patch to upstream gnulib, and cc this list - any project using gnulib will have to backport that patch or wait for a new upstream release of that project that uses newer gnulib if it wants to work around the bug. --=20 Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --VpwPEDJhcSxwHDD2DjwLTDf1TSJ5ohucH-- --lhSS9WK4nax4imaBQWxoFc2X4hku8g6wF Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" Content-length: 604 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJYgPoRAAoJEKeha0olJ0NqetQH/2vA8loICWk+B92YSQvlszXa VyZl4DWAGiHQ2gVjUEio1VnE9sJ7Jb4bdZmUN6iQcbX2qm0HtBCX7vhQ28ICDed8 6t0gWsZZ3ocBCgHm3wyfUqQ0+kPFRXwi/i1TVZsfgemt+saPIL/LFmZW2vjjMZaF YBJG+tz7jlWG8vhmia3v1faqtZWYqumQ2ylYCApFN6Slob+gEa0Q733GPoRfAHN8 dy4drcu3EN27kCSUb/JN09wZ8JRRYE8LbKJeibk8GjY8lLZM9JFa9wUJGu2QDabb CGam5MXpeEcwNgFS00ZqJaeOBkB9wMbmR+ZGmb6sm+O5DRiYYvGiWNQ8gAzFX7I= =1Fvu -----END PGP SIGNATURE----- --lhSS9WK4nax4imaBQWxoFc2X4hku8g6wF--