Re: [Cooker] General (serious) bug in libsafe

[Yoann Vandoorselaere]

Andrej Borsenkow <[EMAIL PROTECTED]> writes:

> On 15 Apr 2001, Yoann Vandoorselaere wrote:
> 
> > Andrej Borsenkow <[EMAIL PROTECTED]> writes:
> >
> > > bor@localhost% LD_BIND_NOW=true /bin/bash
> > > /bin/bash: error while loading shared libraries: /lib/libsafe.so.2.0:
> > > undefined
> > > symbol: __iswspace
> >
> > What is your glibc version ?
> >
> >
> 
> (2.2.2-4mdk)
> 
> Also:
> 
> bor@localhost% objdump --dynamic-syms /lib/libc.so.6 | grep wspace
> 000e7ca0 g    DF .text  00000064  GLIBC_2.1   __iswspace_l
> 000e71b0  w   DF .text  0000006a  GLIBC_2.0   iswspace
> 
> So, it is quite correct - __iswspace does not exist ...

Ok, for a reason that I do not know of,
they directly use internal, not recommended because of version
dependency, glibc function...

This might be because the code in vfscanf.c have been gathered 
from glibc sources, then just modified to catch overflow error.
In this case, the fix would just be to use standard glibc function.

CC'ing libsafe people...

-- 
Yoann Vandoorselaere | One luser tried to change his password on Mandrake. Not
MandrakeSoft         | having any imagination at all, he entered "penis" for a
                     | password... He got the following answer:   BAD PASSWORD:
                     | it is too short