Re: [PATCH v3 2/3] iconvdata: EUC_JISX0213 decoding lacks pending character reset (CVE-2026-80489)

Carlos O'Donell <[email protected]>
Newsgroups gmane.comp.lib.glibc.alpha
Organization Red Hat, LLC.
Message-ID <[email protected]>
On 8/27/26 7:58 AM, Florian Weimer wrote:
> This fixes bug 34568.

LGTM. The distinctly fixable second CVE in similar code.

Reviewed-by: Carlos O'Donell <[email protected]>

> ---
> v3: Split into separate bugs with distinct CVE IDs, as requested.
>   iconvdata/euc-jisx0213.c | 3 +++
>   1 file changed, 3 insertions(+)
> 
> diff --git a/iconvdata/euc-jisx0213.c b/iconvdata/euc-jisx0213.c
> index 5572bbdb7b..61c22231e1 100644
> --- a/iconvdata/euc-jisx0213.c
> +++ b/iconvdata/euc-jisx0213.c
> @@ -224,6 +224,9 @@
>   	    STANDARD_FROM_LOOP_ERR_HANDLER (1);				      \
>   	  }								      \
>         }									      \
> +    else 								      \
> +      /* There was a pending character.  Clear it.  */			      \
> +      *statep = 0;							      \
>   									      \
>       put32 (outptr, ch);							      \
>       outptr += 4;							      \


-- 
Cheers,
Carlos.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.