[Bug stdio/27650] New: vfscanf returns too early if a match is longer than INT_MAX

[Bug stdio/27650] New: vfscanf returns too early if a match is longer than INT_MAX

[hi at alyssa dot is]

https://sourceware.org/bugzilla/show_bug.cgi?id=27650

            Bug ID: 27650
           Summary: vfscanf returns too early if a match is longer than
                    INT_MAX
           Product: glibc
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: stdio
          Assignee: unassigned at sourceware dot org
          Reporter: hi at alyssa dot is
  Target Milestone: ---

Created attachment 13328
  --> https://sourceware.org/bugzilla/attachment.cgi?id=13328&action=edit
Reproduction for the issue

A pattern of unlimited length, like "%*[^\n]", will return as if it had a match
after INT_MAX characters, even if further matching is possible.

A minimal reproduction is attached.

On musl and NetBSD, match lengths are unlimited.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug stdio/27650] vfscanf returns too early if a match is longer than INT_MAX

[hi at alyssa dot is]

https://sourceware.org/bugzilla/show_bug.cgi?id=27650

Alyssa Ross <hi at alyssa dot is> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|normal                      |enhancement

--- Comment #1 from Alyssa Ross <hi at alyssa dot is> ---
Patch: https://sourceware.org/pipermail/libc-alpha/2021-March/124382.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug stdio/27650] vfscanf returns too early if a match is longer than INT_MAX

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=27650

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |2.34
                 CC|                            |fweimer at redhat dot com
         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #2 from Florian Weimer <fweimer at redhat dot com> ---
Fixed in glibc 2.34 with:

commit b03e4d7bd25b1ac485f858f0a857ba6085e8c9b0
Author: Alyssa Ross <hi@alyssa.is>
Date:   Mon May 3 10:34:11 2021 +0200

    stdio: fix vfscanf with matches longer than INT_MAX (bug 27650)

    Patterns like %*[ can safely be used to match a great many characters,
    and it's quite realisitic to use them for more than INT_MAX characters
    from an IO stream.

    With the previous approach, after INT_MAX characters (v)fscanf would
    return successfully, indicating an end to the match, even though there
    wasn't one.

-- 
You are receiving this mail because:
You are on the CC list for the bug.