303bf9
From eecfc44fbd6659ed35719038ecf2b029fe20cfd5 Mon Sep 17 00:00:00 2001
303bf9
From: =?UTF-8?q?Petr=20P=C3=ADsa=C5=99?= <ppisar@redhat.com>
303bf9
Date: Mon, 25 Nov 2019 16:48:33 +0100
303bf9
Subject: [PATCH] Subject: [PATCH] ensure locale_name_on_entry isn't clobbered
303bf9
MIME-Version: 1.0
303bf9
Content-Type: text/plain; charset=UTF-8
303bf9
Content-Transfer-Encoding: 8bit
303bf9
303bf9
If the return value of setlocale() is static storage, the call to
303bf9
setlocale(LC_NUMERIC, "C"); could overwrite it.
303bf9
303bf9
If the return value of setlocale() is malloced, the call to
303bf9
setlocale(LC_NUMERIC, "C"); could free it.
303bf9
303bf9
Either way, we need to copy it.  Fixes gh #17054 rt134212
303bf9
303bf9
Petr Písař: Ported to version-0.9924 from perl commit
303bf9
bcb1da5c29c3a2534a0e43874974b83c9c8b174c.
303bf9
303bf9
Signed-off-by: Petr Písař <ppisar@redhat.com>
303bf9
---
303bf9
 vutil/vutil.c | 6 ++++++
303bf9
 1 file changed, 6 insertions(+)
303bf9
303bf9
diff --git a/vutil/vutil.c b/vutil/vutil.c
303bf9
index 5d183a0..69c8351 100644
303bf9
--- a/vutil/vutil.c
303bf9
+++ b/vutil/vutil.c
303bf9
@@ -638,6 +638,8 @@ VER_NV:
303bf9
             if (   strNE(locale_name_on_entry, "C")
303bf9
                 && strNE(locale_name_on_entry, "POSIX"))
303bf9
             {
303bf9
+                /* the setlocale() call might free or overwrite the name */
303bf9
+                locale_name_on_entry = savepv(locale_name_on_entry);
303bf9
                 setlocale(LC_NUMERIC, "C");
303bf9
             }
303bf9
             else {  /* This value indicates to the restore code that we didn't
303bf9
@@ -661,6 +663,8 @@ VER_NV:
303bf9
                 if (   strNE(locale_name_on_entry, "C")
303bf9
                     && strNE(locale_name_on_entry, "POSIX"))
303bf9
                 {
303bf9
+                    /* the setlocale() call might free or overwrite the name */
303bf9
+                    locale_name_on_entry = savepv(locale_name_on_entry);
303bf9
                     setlocale(LC_NUMERIC, "C");
303bf9
                 }
303bf9
                 else {  /* This value indicates to the restore code that we
303bf9
@@ -710,6 +714,7 @@ VER_NV:
303bf9
 
303bf9
             if (locale_name_on_entry) {
303bf9
                 setlocale(LC_NUMERIC, locale_name_on_entry);
303bf9
+                Safefree(locale_name_on_entry);
303bf9
             }
303bf9
 
303bf9
             LC_NUMERIC_UNLOCK;  /* End critical section */
303bf9
@@ -718,6 +723,7 @@ VER_NV:
303bf9
 
303bf9
             if (locale_name_on_entry) {
303bf9
                 setlocale(LC_NUMERIC, locale_name_on_entry);
303bf9
+                Safefree(locale_name_on_entry);
303bf9
                 LC_NUMERIC_UNLOCK;
303bf9
             }
303bf9
             else if (locale_obj_on_entry == PL_underlying_numeric_obj) {
303bf9
-- 
303bf9
2.21.0
303bf9