[tz] [PROPOSED] Don’t assume nonempty argv

Steffen Nurpmeso steffen at sdaoden.eu
Sat Oct 29 20:01:28 UTC 2022


Guy Harris wrote in
 <C690F5F6-E5D4-4EAD-BEFA-3252DF022EE9 at sonic.net>:
 |On Oct 28, 2022, at 11:56 PM, Paul Eggert via tz <tz at iana.org> wrote:
 |> Don’t dump core if argv[0] is NULL, which is allowed on
 |> GNU/Linux if the invoker is sufficiently perverse.
 |
 |Is argc == 0 in that case?

Just to add this was CVE-2021-4034.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)



More information about the tz mailing list