[Freeassociation-devel] Invalid read on icaltzutil_fetch_timezone

[Milan Crha]

	Hi,
as stated in [1], there is an invalid read done in libical when loading
builtin timezones. The attached test.c is a minimal application which
exhibits the issue. The first line of it contains a comment with a
command line to see the result.

With libical 0.46 I get this output from valgrind:
 Invalid read of size 8
  at 0x4C5F6F9: icaltzutil_fetch_timezone (icaltz-util.c:441)
  by 0x4C60758: icaltimezone_load_builtin_timezone (icaltimezone.c:1796)
  by 0x4C61EDF: icaltimezone_get_component (icaltimezone.c:1215)
  by 0x4006DE: main (test.c:17)
 Address 0x53b5d90 is 0 bytes after a block of size 0 alloc'd
  at 0x4A04896: calloc (vg_replace_malloc.c:418)
  by 0x4C5F124: icaltzutil_fetch_timezone (icaltz-util.c:339)
  by 0x4C60758: icaltimezone_load_builtin_timezone (icaltimezone.c:1796)
  by 0x4C61EDF: icaltimezone_get_component (icaltimezone.c:1215)
  by 0x4006DE: main (test.c:17)

Please consider fixing this in the next release. Thanks in advance.
	Bye,
	Milan

[1] https://bugzilla.gnome.org/show_bug.cgi?id=633967
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.c
Type: text/x-csrc
Size: 428 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/libical-devel/attachments/20110119/e856c54d/attachment.bin>