src/lib/libiconv_modules, branch mainFreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=main2026-06-30T17:00:23Ziconv: Fix a stack buffer overflow in _ISO2022_sputwchar()2026-06-30T17:00:23ZMark Johnstonmarkj@FreeBSD.org2026-06-23T17:45:28Zurn:sha1:150df709c28ca10a7ccec02482441257ec9c13da
In the ISO2022-CN encoding, characters may require at least seven bytes,
and MB_LEN_MAX==6 is insufficient. From code inspection,
_ISO2022_sputwchar() can emit 10 bytes in the worst case, so use that to
size buffers.
Add a regression test.
Approved by: so
Security: FreeBSD-SA-26:49.iconv
Security: CVE-2026-58082
Reviewed by: kevans
Differential Revision: https://reviews.freebsd.org/D57950
iconv: Fix a buffer overflow in the HZ encoding2026-06-30T17:00:23ZMark Johnstonmarkj@FreeBSD.org2026-06-23T16:05:31Zurn:sha1:8bc3abb7d71eebe6819af1e61640067733e596dc
wcrtomb may store up to 2 2-byte escape sequences to the state buffer in
addition to the character itself. In the worst case, a 3-byte heap
overflow is possible.
Approved by: so
Security: FreeBSD-SA-26:49.iconv
Security: CVE-2026-58081
Reviewed by: kevans
Differential Revision: https://reviews.freebsd.org/D57949
iconv(3): Fix problems in various encodings2026-06-30T17:00:23ZTaylor R Campbellriastradh@NetBSD.org2026-06-22T21:15:25Zurn:sha1:a9d3259c4e50da8aac100da23aa37c43055f8be2
Fix null pointer dereference with HZ8 encoding.
Fix output buffer overrun in UTF-7, VIQR, ZW encodings.
Approved by: so
Security: FreeBSD-SA-26:49.iconv
Security: CVE-2026-58081
Reviewed by: markj, kevans
Differential Revision: https://reviews.freebsd.org/D57947
libiconv: Fix typo in comment2026-01-22T15:36:37ZEd Masteemaste@FreeBSD.org2026-01-13T14:31:29Zurn:sha1:dec3ea45b65442b4f3cafcd8a672f1e13b69a066Retire MK_PROFILE infrastructure2024-11-12T17:11:51ZEd Masteemaste@FreeBSD.org2021-08-08T01:00:28Zurn:sha1:3750ccefb8629a08890bfbae894dd6bc6a7483b4
It was disabled by default in fe52b7f60ef4. We planned to (but did not)
remove the option before FreeBSD 14. Remove it now, for FreeBSD 15.
Relnotes: Yes
Reviewed by: imp
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D31558
Remove residual blank line at start of Makefile2024-07-15T22:43:39ZWarner Loshimp@FreeBSD.org2024-07-15T04:46:32Zurn:sha1:e9ac41698b2f322d55ccf9da50a3596edb2c1800
This is a residual of the $FreeBSD$ removal.
MFC After: 3 days (though I'll just run the command on the branches)
Sponsored by: Netflix
lib: Automated cleanup of cdefs and other formatting2023-11-27T05:23:59ZWarner Loshimp@FreeBSD.org2023-11-24T20:12:57Zurn:sha1:a2f733abcff64628b7771a47089628b7327a88bd
Apply the following automated changes to try to eliminate
no-longer-needed sys/cdefs.h includes as well as now-empty
blank lines in a row.
Remove /^#if.*\n#endif.*\n#include\s+<sys/cdefs.h>.*\n/
Remove /\n+#include\s+<sys/cdefs.h>.*\n+#if.*\n#endif.*\n+/
Remove /\n+#if.*\n#endif.*\n+/
Remove /^#if.*\n#endif.*\n/
Remove /\n+#include\s+<sys/cdefs.h>\n#include\s+<sys/types.h>/
Remove /\n+#include\s+<sys/cdefs.h>\n#include\s+<sys/param.h>/
Remove /\n+#include\s+<sys/cdefs.h>\n#include\s+<sys/capsicum.h>/
Sponsored by: Netflix
Remove $FreeBSD$: one-line sh pattern2023-08-16T17:55:03ZWarner Loshimp@FreeBSD.org2023-08-16T17:55:03Zurn:sha1:d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf
Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Remove $FreeBSD$: one-line .c comment pattern2023-08-16T17:54:29ZWarner Loshimp@FreeBSD.org2023-08-16T17:54:29Zurn:sha1:2a63c3be158216222d89a073dcbd6a72ee4aab5a
Remove /^/[*/]\s*\$FreeBSD\$.*\n/
libiconv_modules: Migrate from COMPAT_32BIT to generic COMPAT_libcompat2023-07-09T17:49:35ZJessica Clarkejrtc27@FreeBSD.org2023-07-09T17:49:35Zurn:sha1:d7be70f0ff9a2a3cf2a980e5c8214666d85a463b
See commit 8fad2cda93c7 ("bsd.compat.mk: Provide new CPP and sub-make
variables") for the context behind this change.
Reviewed by: brooks, jhb
Differential Revision: https://reviews.freebsd.org/D40929