Bug 1710478

Summary:	glibc: Fix crash during wide stream buffer flush
Product:	Red Hat Enterprise Linux 8	Reporter:	Florian Weimer <fweimer>
Component:	glibc	Assignee:	Florian Weimer <fweimer>
Status:	CLOSED ERRATA	QA Contact:	qe-baseos-tools-bugs
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	8.1	CC:	ashankar, codonell, dj, fweimer, mnewsome, pfrankli, skolosov
Target Milestone:	rc
Target Release:	8.1
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	glibc-2.28-61.el8	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:	1710460	Environment:
Last Closed:	2019-11-05 21:29:05 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1710460
Bug Blocks:	1684559

Description Florian Weimer 2019-05-15 15:13:54 UTC

+++ This bug was initially created as a clone of Bug #1710460 +++

We need to incorporate this upstream fix:

commit 32ff397533715988c19cbf3675dcbd727ec13e18
Author: Andreas Schwab <schwab>
Date:   Tue May 14 17:14:59 2019 +0200

    Fix crash in _IO_wfile_sync (bug 20568)
    
    When computing the length of the converted part of the stdio buffer, use
    the number of consumed wide characters, not the (negative) distance to the
    end of the wide buffer.

Comment 5 Sergey Kolosov 2019-07-18 15:05:26 UTC

Verified, the bug is reproducible in glibc-2.28-60.el8 and it has been fixed in glibc-2.28-61.el8

Comment 7 errata-xmlrpc 2019-11-05 21:29:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:3513