summaryrefslogtreecommitdiff
path: root/include/poll.h
diff options
context:
space:
mode:
authorRich Felker <dalias@aerifal.cx>2024-02-07 16:08:11 -0500
committerRich Felker <dalias@aerifal.cx>2024-02-07 16:08:11 -0500
commit39838619bb8b65a8897abcfda8c17ad6de0115d8 (patch)
treefa25d3f221295a7ed7b1ace7336d1ab80e842b16 /include/poll.h
parent8b7048680731707d135ea231f81eb3eaf52378ee (diff)
downloadmusl-39838619bb8b65a8897abcfda8c17ad6de0115d8.tar.gz
syslog: use C locale for timestamp generation
depending on contents of the LC_TIME locale, log messages could be malformatted (especially if the ABMON strings contain non-alphabetic characters) or the subsequent code could invoke undefined behavior, via passing a timebuf[] with unspecified contents to snprintf, if the translated ABMON string did not fit in the 16-byte timebuf. this does not appear to be a security-relevant bug, as locale loading functionality is intentionally not available to set*id programs -- the MUSL_LOCPATH environment variable is ignored when libc.secure is true, and custom locales are not loadable without it.
Diffstat (limited to 'include/poll.h')
0 files changed, 0 insertions, 0 deletions