Red Hat Bugzilla – Bug 853990
Wrong value in re_nsub due to a wrong cast
Last modified: 2012-09-17 19:33:34 EDT
Created attachment 609394 [details]
Test case, exhibits when linked to pcreposix
Running regcomp() from pcreposix library on 64-bit architecture where size_t differs to int can write broken value into re_nsub member of first argument.
This has been reported to upstream <http://bugs.exim.org/show_bug.cgi?id=1287> and fixed with commit:
r1024 | ph10 | 2012-08-29 13:08:24 +0200 (St, 29 srp 2012) | 2 lines
Fix re_nsub bug in the POSIX wrapper.
All Fedoras are affected.
Created attachment 609395 [details]
Created attachment 609404 [details]
Created attachment 609405 [details]
pcre-8.21 is not affected, pcre-8.31 is affected. That means only Fedoras ≥ 18 are broken. The problem exhibits on PPC64. I cannot reproduce it on amd64.
pcre-8.31-2.fc18 has been submitted as an update for Fedora 18.
* should fix your issue,
* was pushed to the Fedora 18 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing pcre-8.31-2.fc18'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
pcre-8.31-2.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.