Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20170830020652.GD1627@brightrain.aerifal.cx>
Date: Tue, 29 Aug 2017 22:06:52 -0400
From: Rich Felker <dalias@...c.org>
To: musl@...ts.openwall.com
Subject: Re: open issues

Updated lists after reviewing the list and pushing the changes that
were easy to make/merge:


Still pending due to nontrivial patch to review and/or need for
testing:

- getenv/setenv/putenv ub
  http://www.openwall.com/lists/musl/2017/08/21/1
  http://www.openwall.com/lists/musl/2016/03/13/7
- mbsnrtowcs and mbsnrtowcs confuses byte and wchar counts
  http://www.openwall.com/lists/musl/2017/08/09/1
- oob reads in memmem (and signed << ub)
  http://www.openwall.com/lists/musl/2017/06/29/6
- fix nftw when called with paths ending in slash
  http://www.openwall.com/lists/musl/2017/03/07/1

Pending due to waiting for updated patch incorporating feedback
already given or resolving merge conflicts or similar:

- handle whitespace before %% in scanf
  http://www.openwall.com/lists/musl/2017/07/11/1
- make dlsym and reloc time lookup consistent
  http://www.openwall.com/lists/musl/2017/02/16/1
- newly created thread may run with signals blocked
  < sergei> there seems to be a race condition in pthread_create.c between lines 134 and 298
  < sergei> if line 298 is executed before 134 (assuming syscall returned 0), startlock will be overwritten with zero, the condition will be evaluated to false and __restore_sigs will not be executed
  < sergei> the newly created thread will run with all signals blocked
  < sergei> i have a patch that fixes the issue for me: https://pastebin.com/T5QSd0C9
- missed underflow in fma
  http://www.openwall.com/lists/musl/2017/03/19/6
  new fma, depends on a_clz_64
  http://www.openwall.com/lists/musl/2017/04/23/10

Pending due to need for additional analysis to determine exactly
what/where the bug is:

- mips64 utime issue?
  "tar binary can't fix the modification/access times on any extracted symbolic links,"
  http://www.openwall.com/lists/musl/2017/07/06/1

Pending due to open question about desired behavior:

- getservbyport(_r) should not report numeric ports
  http://www.openwall.com/lists/musl/2017/02/06/5
- mmap should not return EPERM when it means ENOMEM
  http://www.openwall.com/lists/musl/2017/01/12/1
- GLOB_PERIOD is inconsistent with glibc
  http://www.openwall.com/lists/musl/2017/01/12/5
- ldso ctor dependency ordering and recursive dlopen fix
  http://www.openwall.com/lists/musl/2017/01/03/6

Pending due to dependency of fix on larger change:

- use-after-free in __unlock of pthread struct
  http://www.openwall.com/lists/musl/2017/06/01/7

Pending due to need to minor mechanical review:

- fix syscall number differences compared to linux uapi
  http://www.openwall.com/lists/musl/2017/02/18/1

Pending due to missing patch:

- align arm hwcap.h with glibc (nsz)

Punting til later due to lack of serious/any outward symptoms and lack
of any practical way to fix:

- scanf, wrong types in va_arg
  http://www.openwall.com/lists/musl/2017/04/10/3



Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.