{"id":2222921,"url":"http://patchwork.ozlabs.org/api/1.1/covers/2222921/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/cover/20260414021708.3062753-1-marocketbd@gmail.com/","project":{"id":41,"url":"http://patchwork.ozlabs.org/api/1.1/projects/41/?format=json","name":"GNU C Library","link_name":"glibc","list_id":"libc-alpha.sourceware.org","list_email":"libc-alpha@sourceware.org","web_url":"","scm_url":"","webscm_url":""},"msgid":"<20260414021708.3062753-1-marocketbd@gmail.com>","date":"2026-04-14T02:17:05","name":"[v5,0/3] Re: [PATCH v4 2/2] stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]","submitter":{"id":92898,"url":"http://patchwork.ozlabs.org/api/1.1/people/92898/?format=json","name":"Rocket Ma","email":"marocketbd@gmail.com"},"mbox":"http://patchwork.ozlabs.org/project/glibc/cover/20260414021708.3062753-1-marocketbd@gmail.com/mbox/","series":[{"id":499766,"url":"http://patchwork.ozlabs.org/api/1.1/series/499766/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/list/?series=499766","date":"2026-04-14T02:17:05","name":"Re: [PATCH v4 2/2] stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]","version":5,"mbox":"http://patchwork.ozlabs.org/series/499766/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/2222921/comments/","headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=etXHJwiJ;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (2048-bit key,\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=etXHJwiJ","sourceware.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com","sourceware.org; spf=pass smtp.mailfrom=gmail.com","server2.sourceware.org;\n arc=none smtp.remote-ip=2607:f8b0:4864:20::122d"],"Received":["from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fvnxL1z6Dz1yCv\n\tfor ; Tue, 14 Apr 2026 12:17:58 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 388774BA2E3D\n\tfor ; Tue, 14 Apr 2026 02:17:55 +0000 (GMT)","from mail-dl1-x122d.google.com (mail-dl1-x122d.google.com\n [IPv6:2607:f8b0:4864:20::122d])\n by sourceware.org (Postfix) with ESMTPS id B8D564BA2E09\n for ; Tue, 14 Apr 2026 02:17:35 +0000 (GMT)","by mail-dl1-x122d.google.com with SMTP id\n a92af1059eb24-12713e56abdso3350985c88.1\n for ; Mon, 13 Apr 2026 19:17:35 -0700 (PDT)","from localhost ([23.94.240.252]) by smtp.gmail.com with UTF8SMTPSA\n id\n a92af1059eb24-12c345b6208sm18271704c88.8.2026.04.13.19.17.33\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Mon, 13 Apr 2026 19:17:33 -0700 (PDT)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 388774BA2E3D","OpenDKIM Filter v2.11.0 sourceware.org B8D564BA2E09"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org B8D564BA2E09","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org B8D564BA2E09","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776133055; cv=none;\n b=dpGsbfW+ttbTCw/dto0QhjXl7hB/cYuIYFGcYS1zb2OhWpJT5YduN+6NvAVAJois5DBSfYa2Q6GUBXus7AuaO/qF4OMfCuOoSW8BIQ+hW2xaiCW7dOz/lB7L68TJYJUVW0+vmG379DEklyNIBShlnjp6n803kejXDiUekDu/zXI=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776133055; c=relaxed/simple;\n bh=dcsWNfM0t74yn/Mp5gGiz/JRKv3TOC7j36Re+MPFl4Q=;\n h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version;\n b=Jq+QCSa+UNh22rtqH7DCoyum+d2Xv89UhZu8Mci17ll/2dYp3MTg3ceY3xpRZNTaxFd89BP46ClIIC2yxB+cIY8dy0Ebxzv4kfVLAD42RzsaJIyp7qBshvkYv3JPG0c/DweTg0NUNtv0f6eRr2v3qsel+H2U71GjlWuorjd3YPU=","ARC-Authentication-Results":"i=1; server2.sourceware.org","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20251104; t=1776133055; x=1776737855; darn=sourceware.org;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:from:to:cc:subject:date\n :message-id:reply-to;\n bh=QsjZdjdc5Wt87y0DHTMgW6cV5cEq18il9IvdXn+ygxc=;\n b=etXHJwiJGu+StJG2qpPwck+UwxzI/hu6TKpcThcmST7vmqPdPXvChUJnYNQctJzuBO\n y5oFFwxxRXWJiF0ii+XWVZP4Wz8xPwzjSZYiRgqkp3HG89Dh9jrkFH2RusOziiCst5q1\n 2tXK1Uw4SUSXYNzaldNncYPrfBPcsxsE/iKcODPaHqxo7xKmggNFnIsX1ApbXQYAl4zX\n dCf7Xb+xyR2fN+V+cXQG3t5KqODDFs7GjoouYXIzHXdKVBnKwuZHafV6YiB+rBUQ/Tha\n JV6jySRGaRyZdqZdgSAM8TvJcWuQBfrPP0muwbFDxdnmUjI+IZ1gSQC68ETjGFgKsO5u\n t2+A==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776133055; x=1776737855;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from\n :to:cc:subject:date:message-id:reply-to;\n bh=QsjZdjdc5Wt87y0DHTMgW6cV5cEq18il9IvdXn+ygxc=;\n b=UyrHGqGV5sDFXENhsd3xo1jLBpEdmTtnlxwGJJSwS/J3a0H9RSlAgmlWfSOA8y3nH1\n 4bs0xNVpVPc32/UTQVuUsXiAYReOg2k4ixqiEc8WojybIf/QOutMFgaJcA83qU9cPb8U\n tlcefUFdHnssfFKxq3Z7TI/G/c/vixCgw0e9Wb+nVbOKkQUS4AdY3nJwLqlMA4NwdWos\n NBAOnehjGiVZSbdieJEgpv7QMcuHzX2hw/8100vuhe59HfVECPOjwnKZbjpRieS64Mqj\n UL9UqM3PYi1TNG2r1DVF8BDogC92Csp/4c5CauK9CcB2NA/o9ARofGSRAcGS9cKnw6k8\n 5AZg==","X-Gm-Message-State":"AOJu0Yzcpfuz8LM/NX2S4cqnIOeDkwQiNridlw7Ms9lhoS6F7294bj09\n PKUnCjsTpLCufy0U/v2kCwKBFehz5OdeJfhMyFlek8cTyu5bbIsbz7tZ","X-Gm-Gg":"AeBDievfJwUvmFiHa41wu4Ogen32sfwGV3rHnCaiVVsFfufIwjUMViOj96rWP+O2CHs\n FzUZLRjziLEwcjWilES1wWP3H/vNGDHp6iO3e3m2f5btEqhsOfWonsq1Qs82gRBgVi65J7/yqje\n zRv16jaxmkDUwALc/gynlCizBtf91RrTKoTvd3OVonoH+dpmF0biXwgEMQW0nUAzmH0XKsLtxRo\n Em7NGfGoa7MeMBK69Z/RMZysQX1+/8HmTQbb5+xG52ySkdLb8/NzIt/giID3Q/B/gnDVNYAaKRp\n dK5/USSj8Zur0ONWbHs1bK6YVhH3ZRrM8+LTwjOI5QIniaWSPx0cRpS8UmTV2EH5S1Q/E/sDNau\n DnaZtif7e1qrqqqhpsUhqJPO7XjiqpfxR5vl5io+ceqwnStbTLsXo/4P4wgiYVvyGMdL/CpHJkj\n EPBmljv5tqHuDWyil2z6ZviFKyU3yYUR6qLEX4ShmSpUYN7DHcSHEmLdcKkrAQthD6FXSN48Ap6\n FEBPkUHmA23c4F1+RgI2kxRSXLkvKurqpcjp2E91JodJsCUtppwFiBimQPECCK3R80BXSSmIrLO\n hWTS/LTHOg==","X-Received":"by 2002:a05:7022:5f11:b0:12c:3bd2:cbfe with SMTP id\n a92af1059eb24-12c3bd2ce27mr2851131c88.9.1776133054542;\n Mon, 13 Apr 2026 19:17:34 -0700 (PDT)","From":"Rocket Ma ","To":"Carlos O'Donell ","Cc":"libc-alpha@sourceware.org,\n\tFlorian Weimer ","Subject":"[PATCH v5 0/3] Re: [PATCH v4 2/2] stdio-common: Fix buffer overflow\n in scanf %mc [BZ #34008]","Date":"Mon, 13 Apr 2026 19:17:05 -0700","Message-ID":"<20260414021708.3062753-1-marocketbd@gmail.com>","X-Mailer":"git-send-email 2.47.3","In-Reply-To":"<84b7b987-616c-435d-9e71-ed8bcb55dc31@redhat.com>","References":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"},"content":"One commit for regression, one commit to directly fix the overflow, and\none commit to refactor array expansion.\n\nRocket Ma (3):\n stdio-common: Add regression test [BZ #34008]\n stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]\n stdio-common: Optimize %ms expansion for best fit\n\n stdio-common/Makefile | 4 ++\n stdio-common/tst-vfscanf-bz34008.c | 48 ++++++++++++++++++++\n stdio-common/vfscanf-internal.c | 70 +++++++++++++++++++-----------\n 3 files changed, 97 insertions(+), 25 deletions(-)\n create mode 100644 stdio-common/tst-vfscanf-bz34008.c"}