{"id":2227402,"url":"http://patchwork.ozlabs.org/api/1.1/patches/2227402/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/patch/0f4a0180b879bfd9a05c841af1e425a52296f1c0.1776957778.git.vivien@planete-kraus.eu/","project":{"id":41,"url":"http://patchwork.ozlabs.org/api/1.1/projects/41/?format=json","name":"GNU C Library","link_name":"glibc","list_id":"libc-alpha.sourceware.org","list_email":"libc-alpha@sourceware.org","web_url":"","scm_url":"","webscm_url":""},"msgid":"<0f4a0180b879bfd9a05c841af1e425a52296f1c0.1776957778.git.vivien@planete-kraus.eu>","date":"2026-04-23T16:04:03","name":"[v22,5/9] posix: do not allow option name translations for secure programs","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"4f3f6e427a2a60b48bb4949796b3599fc1d901d2","submitter":{"id":90948,"url":"http://patchwork.ozlabs.org/api/1.1/people/90948/?format=json","name":"Vivien Kraus","email":"vivien@planete-kraus.eu"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/glibc/patch/0f4a0180b879bfd9a05c841af1e425a52296f1c0.1776957778.git.vivien@planete-kraus.eu/mbox/","series":[{"id":501215,"url":"http://patchwork.ozlabs.org/api/1.1/series/501215/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/list/?series=501215","date":"2026-04-23T16:03:58","name":"Support translated long option names in getopt and argp","version":22,"mbox":"http://patchwork.ozlabs.org/series/501215/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2227402/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2227402/checks/","tags":{},"headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=planete-kraus.eu header.i=@planete-kraus.eu\n header.a=rsa-sha1 header.s=albinoniA header.b=ViL1o/pJ;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=2620:52:6:3111::32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (2048-bit key,\n secure) header.d=planete-kraus.eu header.i=@planete-kraus.eu\n header.a=rsa-sha1 header.s=albinoniA header.b=ViL1o/pJ","sourceware.org; dmarc=pass (p=reject dis=none)\n header.from=planete-kraus.eu","sourceware.org;\n spf=pass smtp.mailfrom=planete-kraus.eu","server2.sourceware.org;\n arc=none smtp.remote-ip=2a00:5881:4008:2810::309"],"Received":["from vm01.sourceware.org (vm01.sourceware.org\n [IPv6:2620:52:6:3111::32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g1gwH2KDlz1y2d\n\tfor ; Fri, 24 Apr 2026 02:07:27 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 7ECD74BB1C2E\n\tfor ; Thu, 23 Apr 2026 16:07:25 +0000 (GMT)","from planete-kraus.eu (planete-kraus.eu\n [IPv6:2a00:5881:4008:2810::309])\n by sourceware.org (Postfix) with ESMTPS id 47DEE4BBC0E9\n for ; Thu, 23 Apr 2026 16:05:51 +0000 (GMT)","from planete-kraus.eu (localhost [127.0.0.1])\n by planete-kraus.eu (OpenSMTPD) with ESMTP id 3d1a8f6a;\n Thu, 23 Apr 2026 16:05:42 +0000 (UTC)","by planete-kraus.eu (OpenSMTPD) with ESMTPSA id 1e25998a\n (TLSv1.3:TLS_CHACHA20_POLY1305_SHA256:256:NO);\n Thu, 23 Apr 2026 16:05:40 +0000 (UTC)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 7ECD74BB1C2E","OpenDKIM Filter v2.11.0 sourceware.org 47DEE4BBC0E9"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org 47DEE4BBC0E9","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org 47DEE4BBC0E9","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1776960351; cv=none;\n b=P+w2J/maB3TUk2cVKSbpsd7NANqZ3UFu1Eb9jmkrFgZ8HUrA386udEwC1gUPbAFVTgaReTEgUqO9J1SOA+duFRMbO5FjMoJu1eWnCFDa3ywlX2yaRAk4l/V38CmYuQOiCsMLxqeqtnYBuS6WkLpE34ZVjCXinuTh4807OOnp/jM=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1776960351; c=relaxed/simple;\n bh=t32QflExz4/Co/8s+Z2fcpALgYqaCVwm0JHnfvCWjTQ=;\n h=DKIM-Signature:From:To:Subject:Date:Message-ID:MIME-Version;\n b=AdPomwRP+ixYQgu9lDfHlbGuO242gfDAmtETopFHnV2lz44bpFujso0Sf0mX/IpDskE/FcfAVjo90WyJ3vi0mRwcaV1nWpdjDzNGzQNxVFwhvOvOjgtrbyOLB9re287hN9tS5Il6QWg05pJAaToQC3aLm7fyf0P5hqb59BEAjwM=","ARC-Authentication-Results":"i=1; server2.sourceware.org","DKIM-Signature":"v=1; a=rsa-sha1; c=relaxed; d=planete-kraus.eu; h=from\n :to:cc:subject:date:message-id:in-reply-to:references\n :mime-version:content-transfer-encoding; s=albinoniA; bh=Nn0ct0d\n PAhW1FfEqoLRQOR7FT74=; b=ViL1o/pJjtAgzbz56cwhYLmNu7ODUJbtBLcyDVm\n Io/mUV9zn2cJL9Eaa5COj0zK5EIPrma+LzfCX1t2Uco6+WBeWqX/Sp5y3Yc6fcMO\n hR06z2uPUy8qZHmKzo8OU8sdfNrQwmJ8hJH8YsZ50lQbk1QMO3dyLCCmEauQIbTL\n zFZmL34dPPCOpxWMTiiptaLI8+nd+l5bo0BdjXX+MAnZsJAJdLPGIo5jWcvpeqhZ\n YVId1st+2h2Wi9iQuj/TSOgvKTN8wq6XxfwQksrL1fF0uBgPRFTEWn+SgrtQSRcn\n Vky/xIabdQfZIKz7vWpFfXuGuvcqnzBD3Ho8OmBN9hF6yeg==","From":"Vivien Kraus ","To":"adhemerval.zanella@linaro.org,\n\tlibc-alpha@sourceware.org","Cc":"Vivien Kraus ","Subject":"[PATCH v22 5/9] posix: do not allow option name translations for\n secure programs","Date":"Thu, 23 Apr 2026 18:04:03 +0200","Message-ID":"\n <0f4a0180b879bfd9a05c841af1e425a52296f1c0.1776957778.git.vivien@planete-kraus.eu>","X-Mailer":"git-send-email 2.52.0","In-Reply-To":"","References":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"},"content":"SETUID / SETGID / AT_SECURE programs should not accept translated\nnames, so that the programmer knows exactly how the program can be\ninvoked.\n---\n posix/getopt.c | 2 +-\n 1 file changed, 1 insertion(+), 1 deletion(-)","diff":"diff --git a/posix/getopt.c b/posix/getopt.c\nindex ae823eec29..399abeea74 100644\n--- a/posix/getopt.c\n+++ b/posix/getopt.c\n@@ -199,7 +199,7 @@ match_translated_option_name (char *(*translate) (const char *, const char *,\n const char *translated = opt_name;\n char *translation_buffer = NULL;\n bool matches = false;\n- if (translate != NULL)\n+ if (translate != NULL && !__libc_enable_secure)\n translated = translate (opt_textdomain, translation_context,\n \t\t\t opt_name, &translation_buffer);\n \n","prefixes":["v22","5/9"]}