[8u] RFR (S) 8165936: Potential Heap buffer overflow when seaching timezone info files

Aleksey Shipilev shade at redhat.com
Mon Mar 30 12:00:18 UTC 2020


Thanks! Added the labels.

-Aleksey

On 3/30/20 1:04 PM, Thomas Stüfe wrote:
> LGTM
> 
> ..Thomas
> 
> On Mon, Mar 30, 2020 at 12:33 PM Aleksey Shipilev <shade at redhat.com <mailto:shade at redhat.com>> wrote:
> 
>     Original bug:
>       https://bugs.openjdk.java.net/browse/JDK-8165936
>       https://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8ec0559cbd7e
> 
>     Unfortunately, the patch does apply directly to 8u:
>      - TimeZone_md.c for unixes is actually in "solaris" folder
>      - ...and then the context is different enough for fuzz to fail
> 
>     8u webrev:
>       https://cr.openjdk.java.net/~shade/8165936/webrev.8u.01/
> 
>     Testing: tier1
> 
>     -- 
>     Thanks,
>     -Aleksey
> 






More information about the jdk8u-dev mailing list