From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
	MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H3,
	RCVD_IN_MSPIKE_WL autolearn=ham autolearn_force=no version=3.4.4
Received: (qmail 572 invoked from network); 14 Dec 2021 11:38:28 -0000
Received: from mother.openwall.net (195.42.179.200)
  by inbox.vuxu.org with ESMTPUTF8; 14 Dec 2021 11:38:28 -0000
Received: (qmail 12192 invoked by uid 550); 14 Dec 2021 11:38:26 -0000
Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm
Precedence: bulk
List-Post: <mailto:musl@lists.openwall.com>
List-Help: <mailto:musl-help@lists.openwall.com>
List-Unsubscribe: <mailto:musl-unsubscribe@lists.openwall.com>
List-Subscribe: <mailto:musl-subscribe@lists.openwall.com>
List-ID: <musl.lists.openwall.com>
Reply-To: musl@lists.openwall.com
Received: (qmail 5400 invoked from network); 14 Dec 2021 09:00:32 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=atufi.org;
	s=20191114; t=1639472421;
	bh=4nKKdhkX7ayVG7IaZ2GBD6qD1U3ryGN9hx4fSYRj8XU=;
	h=From:To:Subject:Date:From;
	b=Qi6yjmJKyY8LHnPnAty+NwwYfR10szT2zrAY1iSqy0MXDUco/lqtph/9YTkI/D2h5
	 aF6LrA2UlfdrfZBd1zfwCmHt78u2+BhTYBt6Ntpr/kezMj8NB4/b+y71Rmk4HGN1MT
	 obzstKEDEveBO/okmCycq7R2Rd5f220TCHfb3S9M=
From: Daniel Gerber <dg@atufi.org>
To: musl@lists.openwall.com
Date: Tue, 14 Dec 2021 10:01:09 +0100
Message-ID: <87o85j8sru.fsf@atufi.org>
MIME-Version: 1.0
Content-Type: text/plain
Subject: [musl] Bug in mntent.c: whitespace characters are not escaped

Hello,

The musl implementation of getmntent does not handle octal escape sequences
as the manual getmntent(3) says:

> Since fields in the mtab and fstab files are separated by
> whitespace, octal escapes are used to represent the characters
> space (\040), tab (\011), newline (\012), and backslash (\\) in
> those files when they occur in one of the four strings in a
> mntent structure.  The routines addmntent() and getmntent() will
> convert from string representation to escaped representation and
> back.  When converting from escaped representation, the sequence
> \134 is also converted to a backslash.

(See resulting bug <https://github.com/libfuse/libfuse/issues/634>.)


Best,

Daniel Gerber
--