Bug 1533121
| Summary: | libunistring is not thread safe and contains invalid memory accesses | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Florian Weimer <fweimer> | 
| Component: | libunistring | Assignee: | Pádraig Brady <p> | 
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | 
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | dueno, fweimer, i18n-bugs, jim, nmavrogi, p, redhat-bugzilla | 
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-03-01 10:19:44 UTC | Type: | Bug | 
| Regression: | --- | Mount Type: | --- | 
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1452750 | ||
| 
 
        
          Description
        
        
          Florian Weimer
        
        
        
        
        
          2018-01-10 14:05:10 UTC
        
       
      
      
      
    Adding these for reference: http://lists.gnu.org/archive/html/bug-gnulib/2018-01/msg00046.html Florian if there is an upstream release with the fix and the fedora package includes would glibc be still blocked for F28? I'm not aware of any libunistring upstream fix.  The code was copied from gnulib, and it was fixed in:
commit 8a4aa2ec86c0e94c6ed548519b1660c6b1bac0c1
Author: Bruno Haible <bruno>
Date:   Fri Feb 2 19:32:02 2018 +0100
    malloca, xmalloca: Make multithread-safe.
Plus some subsequent cleanups.
I think this issue arises only on non-UTF-8 locales.  Since UTF-8 is the default in Fedora, I don't think it qualifies as a blocker.
    This bug appears to have been reported against 'rawhide' during the Fedora 28 development cycle. Changing version to '28'. libunistring 0.9.9 was released today, copying the fixes from gnulib. Built it in all active branches and submitted the updates for F27 and F26.  |