oss-sec mailing list archives

Re: charset.alias in pkexec/glib/gnulib


From: Jakub Wilk <jwilk () jwilk net>
Date: Tue, 9 Feb 2021 17:29:15 +0100

* Jakub Wilk <jwilk () jwilk net>, 2017-06-23, 20:23:
* Tavis Ormandy <taviso () cmpxchg8b com>, 2014-07-13, 18:59:
because pkexec links to glib, the built-in iconv/gconv conversion stuff is used by default. This allows you to setup aliases, which are of the form "charset <arbitrary alias>", for example:


$ echo "UTF-7 ThisIsAnAlias" > charset.alias
$ CHARSET=ThisIsAnAlias CHARSETALIASDIR=$(pwd) pkexec
pkexec --version +AHw
     --help +AHw
     --disable-internal-agent +AHw
     +AFs---user username+AF0 PROGRAM +AFs-ARGUMENTS...+AF0

I believe this was fixed in glib 2.63.6:
https://gitlab.gnome.org/GNOME/glib/commit/3529bb4450a51995

--
Jakub Wilk


Current thread: