DJ Delorie ef21bd2d8c loadarchive: guard against locale-archive corruption (Bug #25115)
_nl_load_locale_from_archive() checks for a zero size, but
divides by both (size) and (size-2).  Extend the check to
guard against a size of two or less.

Tested by manually corrupting locale-archive and running a program
that calls setlocale() with LOCPATH unset (size is typically very
large).

Reviewed-by: Carlos O'Donell <carlos@redhat.com>
2019-10-18 20:40:54 -04:00
..
2009-11-17 16:23:57 -08:00
2009-11-17 16:23:57 -08:00