1 files changed, 54 insertions, 0 deletions
diff --git a/REORG.TODO/string/tst-strcoll-overflow.c b/REORG.TODO/string/tst-strcoll-overflow.c
new file mode 100644
index 0000000000..826af4f8a8
--- /dev/null
+++ b/REORG.TODO/string/tst-strcoll-overflow.c
@@ -0,0 +1,54 @@
+/* Copyright (C) 2013-2017 Free Software Foundation, Inc.
+   This file is part of the GNU C Library.
+
+   The GNU C Library is free software; you can redistribute it and/or
+   modify it under the terms of the GNU Lesser General Public
+   License as published by the Free Software Foundation; either
+   version 2.1 of the License, or (at your option) any later version.
+
+   The GNU C Library is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+   Lesser General Public License for more details.
+
+   You should have received a copy of the GNU Lesser General Public
+   License along with the GNU C Library; if not, see
+   <http://www.gnu.org/licenses/>.  */
+
+#include <locale.h>
+#include <stdio.h>
+#include <stdint.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include <support/check.h>
+#include <support/test-driver.h>
+
+/* Verify that strcoll does not crash for large strings for which it
+   cannot cache weight lookup results.  The size is large enough to
+   cause integer overflows on 32-bit as well as buffer overflows on
+   64-bit.  */
+#define SIZE 0x40000000ul
+
+int
+do_test (void)
+{
+  TEST_VERIFY_EXIT (setlocale (LC_COLLATE, "en_GB.UTF-8") != NULL);
+
+  char *p = malloc (SIZE);
+  if (p == NULL)
+    {
+      puts ("info: could not allocate memory, cannot run test");
+      return EXIT_UNSUPPORTED;
+    }
+
+  memset (p, 'x', SIZE - 1);
+  p[SIZE - 1] = 0;
+  printf ("info: strcoll result: %d\n", strcoll (p, p));
+  return 0;
+}
+
+/* This test can rung for a long time, but it should complete within
+   this time on reasonably current hardware.  */
+#define TIMEOUT 300
+#include <support/test-driver.c>