[tz] [PROPOSED] Don’t assume nonempty argv
Steffen Nurpmeso
steffen at sdaoden.eu
Sat Oct 29 20:01:28 UTC 2022
Guy Harris wrote in
<C690F5F6-E5D4-4EAD-BEFA-3252DF022EE9 at sonic.net>:
|On Oct 28, 2022, at 11:56 PM, Paul Eggert via tz <tz at iana.org> wrote:
|> Don’t dump core if argv[0] is NULL, which is allowed on
|> GNU/Linux if the invoker is sufficiently perverse.
|
|Is argc == 0 in that case?
Just to add this was CVE-2021-4034.
--steffen
|
|Der Kragenbaer, The moon bear,
|der holt sich munter he cheerfully and one by one
|einen nach dem anderen runter wa.ks himself off
|(By Robert Gernhardt)
More information about the tz
mailing list