[tz] Re: buffer overflow in zic

On 2025-03-05 21:56, Евгений Горбанев wrote:

I found this scenario while researching the postgresql code using Svace static analyzer. Well, try this scenario:

$ cd /tmp $ wget https://data.iana.org/time-zones/releases/tzdb-2025a.tar.lz $ tar xf tzdb-2025a.tar.lz $ cd tzdb-2025a $ make CFLAGS='-fsanitize=address -g' $ touch test $ ./zic -l test -d .

Thanks for the explanation and recipe. I can reproduce the problem. Please try the attached proposed patch. I installed it into the development repository <https://github.com/eggert/tz>. Thanks.