[8u] RFR (S) 8165936: Potential Heap buffer overflow when seaching timezone info files

Thomas Stüfe thomas.stuefe at gmail.com
Mon Mar 30 11:04:16 UTC 2020


LGTM

..Thomas

On Mon, Mar 30, 2020 at 12:33 PM Aleksey Shipilev <shade at redhat.com> wrote:

> Original bug:
>   https://bugs.openjdk.java.net/browse/JDK-8165936
>   https://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8ec0559cbd7e
>
> Unfortunately, the patch does apply directly to 8u:
>  - TimeZone_md.c for unixes is actually in "solaris" folder
>  - ...and then the context is different enough for fuzz to fail
>
> 8u webrev:
>   https://cr.openjdk.java.net/~shade/8165936/webrev.8u.01/
>
> Testing: tier1
>
> --
> Thanks,
> -Aleksey
>
>


More information about the jdk8u-dev mailing list