This is the mail archive of the libc-announce@sourceware.org mailing list for the GNU libc project.

The GNU C Library version 2.30 is now available

From: Carlos O'Donell <carlos at redhat dot com>

To: libc-announce at sourceware dot org

Date: Thu, 1 Aug 2019 16:12:07 -0400

Subject: The GNU C Library version 2.30 is now available

The GNU C Library ================= The GNU C Library version 2.30 is now available. The GNU C Library is used as *the* C library in the GNU system and in GNU/Linux systems, as well as many other systems that use Linux as the kernel. The GNU C Library is primarily designed to be a portable and high performance C library. It follows all relevant standards including ISO C11 and POSIX.1-2017. It is also internationalized and has one of the most complete internationalization interfaces known. The GNU C Library webpage is at http://www.gnu.org/software/libc/ Packages for the 2.30 release may be downloaded from: http://ftpmirror.gnu.org/libc/ http://ftp.gnu.org/gnu/libc/ The mirror list is at http://www.gnu.org/order/ftp.html NEWS for version 2.30 ===================== Major new features: * Unicode 12.1.0 Support: Character encoding, character type info, and transliteration tables are all updated to Unicode 12.1.0, using generator scripts contributed by Mike FABIAN (Red Hat). * The dynamic linker accepts the --preload argument to preload shared objects, in addition to the LD_PRELOAD environment variable. * The twalk_r function has been added. It is similar to the existing twalk function, but it passes an additional caller-supplied argument to the callback function. * On Linux, the getdents64, gettid, and tgkill functions have been added. * Minguo (Republic of China) calendar support has been added as an alternative calendar for the following locales: zh_TW, cmn_TW, hak_TW, nan_TW, lzh_TW. * The entry for the new Japanese era has been added for ja_JP locale. * Memory allocation functions malloc, calloc, realloc, reallocarray, valloc, pvalloc, memalign, and posix_memalign fail now with total object size larger than PTRDIFF_MAX. This is to avoid potential undefined behavior with pointer subtraction within the allocated object, where results might overflow the ptrdiff_t type. * The dynamic linker no longer refuses to load objects which reference versioned symbols whose implementation has moved to a different soname since the object has been linked. The old error message, symbol FUNCTION-NAME, version SYMBOL-VERSION not defined in file DSO-NAME with link time reference, is gone. * Add new POSIX-proposed pthread_cond_clockwait, pthread_mutex_clocklock, pthread_rwlock_clockrdlock, pthread_rwlock_clockwrlock and sem_clockwait functions. These behave similarly to their "timed" equivalents, but also accept a clockid_t parameter to determine which clock their timeout should be measured against. All functions allow waiting against CLOCK_MONOTONIC and CLOCK_REALTIME. The decision of which clock to be used is made at the time of the wait (unlike with pthread_condattr_setclock, which requires the clock choice at initialization time). * On AArch64 the GNU IFUNC resolver call ABI changed: old resolvers still work, new resolvers can use a second argument which can be extended in the future, currently it contains the AT_HWCAP2 value. Deprecated and removed features, and other changes affecting compatibility: * The copy_file_range function fails with ENOSYS if the kernel does not support the system call of the same name. Previously, user space emulation was performed, but its behavior did not match the kernel behavior, which was deemed too confusing. Applications which use the copy_file_range function can no longer rely on glibc to provide a fallback on kernels that do not support the copy_file_range system call, and if this function returns ENOSYS, they will need to use their own fallback. Support for copy_file_range for most architectures was added in version 4.5 of the mainline Linux kernel. * The functions clock_gettime, clock_getres, clock_settime, clock_getcpuclockid, clock_nanosleep were removed from the librt library for new applications (on architectures which had them). Instead, the definitions in libc will be used automatically, which have been available since glibc 2.17. * The obsolete and never-implemented XSI STREAMS header files <stropts.h> and <sys/stropts.h> have been removed. * Support for the "inet6" option in /etc/resolv.conf and the RES_USE_INET6 resolver flag (deprecated in glibc 2.25) have been removed. * The obsolete RES_INSECURE1 and RES_INSECURE2 option flags for the DNS stub resolver have been removed from <resolv.h>. * With --enable-bind-now, installed programs are now linked with the BIND_NOW flag. * Support for the PowerPC SPE ISA extension (powerpc-*-*gnuspe* configurations) has been removed, following the deprecation of this subarchitecture in version 8 of GCC, and its removal in version 9. * On 32-bit Arm, support for the port-based I/O emulation and the <sys/io.h> header have been removed. * The Linux-specific <sys/sysctl.h> header and the sysctl function have been deprecated and will be removed from a future version of glibc. Application should directly access /proc instead. For obtaining random bits, the getentropy function can be used. Changes to build and runtime requirements: * GCC 6.2 or later is required to build the GNU C Library. Older GCC versions and non-GNU compilers are still supported when compiling programs that use the GNU C Library. Security related changes: CVE-2019-7309: x86-64 memcmp used signed Jcc instructions to check size. For x86-64, memcmp on an object size larger than SSIZE_MAX has undefined behavior. On x32, the size_t argument may be passed in the lower 32 bits of the 64-bit RDX register with non-zero upper 32 bits. When it happened with the sign bit of RDX register set, memcmp gave the wrong result since it treated the size argument as zero. Reported by H.J. Lu. CVE-2019-9169: Attempted case-insensitive regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read. Reported by Hongxu Chen. The following bugs are resolved with this release: [2872] locale: Transliteration Cyrillic -> ASCII fails [6399] libc: gettid() should have a wrapper [16573] malloc: mtrace hangs when MALLOC_TRACE is defined [16976] glob: fnmatch unbounded stack VLA for collating symbols [17396] localedata: globbing for locale by [[.collating-element.]] [18035] dynamic-link: pldd does no longer work, enters infinite loop [18465] malloc: memusagestat is built using system C library [18830] locale: iconv -c -f ascii with >buffer size worth of input before invalid input drops valid char [20188] nptl: libpthread IFUNC resolver for vfork can lead to crash [20568] locale: Segfault with wide characters and setlocale/fgetwc/UTF-8 [21897] localedata: Afar locales: Fix mon, abmon, and abday [22964] localedata: The Japanese Era name will be changed on May 1, 2019 [23352] malloc: __malloc_check_init still defined in public header malloc.h. [23403] nptl: Wrong alignment of TLS variables [23501] libc: nftw() doesn't return dangling symlink's inode [23733] malloc: Check the count before calling tcache_get() [23741] malloc: Missing __attribute_alloc_size__ in many allocation functions [23831] localedata: nl_NL missing LC_NUMERIC thousands_sep [23844] nptl: pthread_rwlock_trywrlock results in hang [23983] argparse: Missing compat versions of argp_failure and argp_error for long double = double [23984] libc: Missing compat versions of err.h and error.h functions for long double = double [23996] localedata: Dutch salutations [24040] libc: riscv64: unterminated call chain in __thread_start [24047] network: libresolv should use IP_RECVERR/IPV6_RECVERR to avoid long timeouts [24051] stdio: puts and putchar ouput to _IO_stdout instead of stdout [24059] nss: nss_files: get_next_alias calls fgets_unlocked without checking for NULL. [24114] regex: regexec buffer read overrun in "grep -i '\(\(\)*.\)*\(\)\(\)\1'" [24122] libc: Segfaults if 0 returned from la_version [24153] stdio: Some input functions do not react to stdin assignment [24155] string: x32 memcmp can treat positive length as 0 (if sign bit in RDX is set) (CVE-2019-7309) [24161] nptl: __run_fork_handlers self-deadlocks in malloc/tst-mallocfork2 [24164] libc: Systemtap probes need to use "nr" constraint on 32-bit Arm, not the default "nor" [24166] dynamic-link: Dl_serinfo.dls_serpath[1] in dlfcn.h causes UBSAN false positives, change to modern flexible array [24180] nptl: pthread_mutex_trylock does not use the correct order of instructions while maintaining the robust mutex list due to missing compiler barriers. [24194] librt: Non-compatibility symbols for clock_gettime etc. cause unnecessary librt dependencies [24200] localedata: Revert first_weekday removal in en_IE locale [24211] nptl: Use-after-free in Systemtap probe in pthread_join [24215] nptl: pthread_timedjoin_np should be a cancellation point [24216] malloc: Check for large bin list corruption when inserting unsorted chunk [24228] stdio: old x86 applications that use legacy libio crash on exit [24231] dynamic-link: [sparc64] R_SPARC_H34 implementation falls through to R_SPARC_H44 [24293] localedata: Missing Minguo calendar support for TW locales [24296] localedata: Orthographic mistakes in 'day' and 'abday' sections in tt_RU (Tatar) locale [24307] localedata: Update locale data to Unicode 12.0.0 [24323] dynamic-link: dlopen should not be able open PIE objects [24335] build: "Obsolete types detected" with Linux 5.0 headers [24369] localedata: Orthographic mistakes in 'mon' and 'abmon' sections in tt_RU (Tatar) locale [24370] localedata: Add lang_name for tt_RU locale [24372] locale: Binary locale files are not architecture independent [24394] time: strptime %Ey mis-parses final year of era [24476] dynamic-link: __libc_freeres triggers bad free in libdl if dlerror was not used [24506] dynamic-link: FAIL: elf/tst-pldd with --enable-hardcoded-path-in- tests [24531] malloc: Malloc tunables give tcache assertion failures [24532] libc: conform/arpa/inet.h failures due to linux kernel 64-bit time_t changes [24535] localedata: Update locale data to Unicode 12.1.0 [24537] build: nptl/tst-eintr1 test case can hit task limits on some kernels and break testing [24544] build: elf/tst-pldd doesn't work if you install with a --prefix [24556] build: [GCC 9] error: ‘%s’ directive argument is null [-Werror=format-overflow=] [24570] libc: alpha: compat msgctl uses __IPC_64 [24584] locale: Data race in __wcsmbs_clone_conv [24588] stdio: Remove codecvt vtables from libio [24603] math: sysdeps/ieee754/dbl-64/branred.c is slow when compiled with -O3 -march=skylake [24614] localedata: nl_NL LC_MONETARY doesn't match CLDR 35 [24632] stdio: Old binaries which use freopen with default stdio handles crash [24640] libc: __ppc_get_timebase_freq() always return 0 when using static linked glibc [24652] localedata: szl_PL spelling correction [24695] nss: nss_db: calling getpwent after endpwent crashes [24696] nss: endgrent() clobbers errno=ERRNO for 'group: db files' entry in /etc/nsswitch.conf [24699] libc: mmap64 with very large offset broken on MIPS64 n32 [24740] libc: getdents64 type confusion [24741] dynamic-link: ld.so should not require that a versioned symbol is always implemented in the same library [24744] libc: Remove copy_file_range emulation [24757] malloc: memusagestat is linked against system libpthread [24794] libc: Partial test suite run builds corrupt test-in-container testroot Release Notes ============= https://sourceware.org/glibc/wiki/Release/2.30 Contributors ============ This release was made possible by the contributions of many people. The maintainers are grateful to everyone who has contributed changes or bug reports. These include: Adam Maris Adhemerval Zanella Alexandra Hájková Andreas K. Hüttel Andreas Schwab Anton Youdkevitch Aurelien Jarno Carlos O'Donell DJ Delorie Daniil Zhilin David Abdurachmanov David Newall Dmitry V. Levin Egor Kobylkin Felix Yan Feng Xue Florian Weimer Gabriel F. T. Gomes Grzegorz Kulik H.J. Lu Jan Kratochvil Jim Wilson Joseph Myers Maciej W. Rozycki Mao Han Mark Wielaard Matthew Malcomson Mike Crowe Mike FABIAN Mike Frysinger Mike Gerow PanderMusubi Patsy Franklin Paul A. Clarke Paul Clarke Paul Eggert Paul Pluzhnikov Rafal Luzynski Richard Henderson Samuel Thibault Siddhesh Poyarekar Stan Shebs Stefan Liebler Szabolcs Nagy TAMUKI Shoichi Tobias Klauser Tulio Magno Quites Machado Filho Uros Bizjak Vincent Chen Vineet Gupta Wilco Dijkstra Wolfram Sang Yann Droneaud Zack Weinberg mansayk marxin -- Cheers, Carlos.