Usage of iconv()
Bernd Eckenfels
ecki at zusammenkunft.net
Tue Apr 23 12:11:14 UTC 2024
Du to a glibc security alert about a charset in iconv() I checked OpenJDK (since I was quite sure encoding is handled in JCL), however there are a few utilities (related to libinstrument and splash Screens) which use iconv.
If I see it correctly it’s mostly used for utf8 so it should not expose this particular globe weakness, but I still wonder if that dependency is needed. For some platforms like AIX it even drags on an additional library dependency. (Not to mention different charger tables and especially ugly locale dependencies for containers).
Gruß
Bernd
—
https://bernd.eckenfels.net
More information about the core-libs-dev
mailing list