Hello Bruno,

Bruno Haible wrote:
> Rainer Tammer wrote:
>   
>> # ./testme
>> res = 0
>> outptr-buf = 2, outbytesleft = -1, buf = { 0xC3, 0x84 }
>>     
> This is a buffer overrun bug: Although an outbytesleft argument of 1 is
> given, the iconv() function writes 2 bytes into memory. This kind of bug,
> if not worked around, can crash any program that uses iconv.
>
> I'm adding this detection to gnulib. It will have the effect that the
> iconv() function is not used in this case, which is better than using a
> function that can crash the program.
>
>   
OK,
this has the consequence that we need a fix from IBM ASAP or that the
installation of GNU iconv is necessary.
I will try the current iconv in AIX 5.3/6.1/7BETA in the next couple of
days.

When I open an PMR with IBM I send them the test program, this should
show the problem.

Bye
  Rainer


Reply via email to