Created attachment 6751 [details] Patch to fix regresion CVE-2011-2522 introduced the dependency on atoll. Atoll is not supported on AIX 5.1, HP-UX 11, OSF/1 5.1, Interix 3.5. This patch adds a replace function for atoll based on http://pubs.opengroup.org/onlinepubs/9699919799/functions/atoll.html Patch includes: * Waf test * Configure test * actual code to libreplace for atoll * added testcase to replacetest The replacement was possible, because strtoll is allready supported by libreplace.
Created attachment 6756 [details] Patch for master I think it's better to use strtoll() in the caller. Kai, can you please test if this also works as desired? metze
Comment on attachment 6756 [details] Patch for master Looks good.
Created attachment 6760 [details] Patch for v3-6-test I'm not sure if this is needed for 3.6.0, it should at least not delay it.
Comment on attachment 6760 [details] Patch for v3-6-test Direct cherry-pick of the code I reviewed for master, the related code in SWAT is unchanged between 3.6 and master.
Karolin, please pick for 3.6.0 or 3.6.1
Created attachment 6761 [details] Patch for v3-5-test
Created attachment 6762 [details] Patch for v3-4-test
Comment on attachment 6761 [details] Patch for v3-5-test Same as before.
Comment on attachment 6762 [details] Patch for v3-4-test Ditto.
Karolin, the patches look good for inclusion into the next 3.5 (and possibly 3.4) releases.
Pushed to v3-4-test, v3-5-test and v3-6-test. Will be included in 3.6.0. Closing out bug report. Thanks!
Created attachment 6765 [details] Patch for v3-3-test
(In reply to comment #12) > Created attachment 6765 [details] > Patch for v3-3-test Pushed to v3-3-test.
Comment on attachment 6765 [details] Patch for v3-3-test Last but not least, fine as well.