From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/7253 Path: news.gmane.org!not-for-mail From: Szabolcs Nagy Newsgroups: gmane.linux.lib.musl.general Subject: Re: buffer overflow in regcomp and a way to find more of those Date: Mon, 23 Mar 2015 15:53:18 +0100 Message-ID: <20150323145317.GQ16260@port70.net> References: <20150321013225.GT23507@brightrain.aerifal.cx> <20150321015619.GU23507@brightrain.aerifal.cx> <20150321022023.GW23507@brightrain.aerifal.cx> <20150321132810.GI16260@port70.net> <20150323123540.GP16260@port70.net> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1427122421 16294 80.91.229.3 (23 Mar 2015 14:53:41 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 23 Mar 2015 14:53:41 +0000 (UTC) Cc: musl@lists.openwall.com, Konstantin Serebryany , Rich Felker To: stephen Turner Original-X-From: musl-return-7266-gllmg-musl=m.gmane.org@lists.openwall.com Mon Mar 23 15:53:35 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1Ya3jP-0008Ta-V3 for gllmg-musl@m.gmane.org; Mon, 23 Mar 2015 15:53:32 +0100 Original-Received: (qmail 24244 invoked by uid 550); 23 Mar 2015 14:53:30 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 24224 invoked from network); 23 Mar 2015 14:53:29 -0000 Mail-Followup-To: stephen Turner , musl@lists.openwall.com, Konstantin Serebryany , Rich Felker Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Xref: news.gmane.org gmane.linux.lib.musl.general:7253 Archived-At: * stephen Turner [2015-03-23 10:40:01 -0400]: > So musl doesn't have any tests currently to ensure it was built correctly it has tests, just not in the main repo > by testing its responses to calls? I have seen a few packages such as > binutils come with its own built in test which I would gladly make use of > if it was available. you can use the tests, they are available at http://nsz.repo.hu/git/?p=libc-test (which was supposed to be a temporary location until a cleanup is done..)