Imagelibrary/binutils-gdb
1
0
Fork 1
mirror of https://github.com/bminor/binutils-gdb.git synced 2025-12-08 16:43:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix an illegal memory access triggered by an attempt to parse a corrupt input file.

Browse Source 
PR 28046
	* dwarf2.c (read_ranges): Check that range_ptr does not exceed
	range_end.
This commit is contained in:
Nick Clifton
2021-07-02 14:56:36 +01:00
parent 4ff0bb2df5
commit 49910fd88d
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
bfd/ChangeLog
View File

@@ -1,3 +1,9 @@
2021-07-02 Nick Clifton <nickc@redhat.com>
PR 28046
* dwarf2.c (read_ranges): Check that range_ptr does not exceed
range_end.
2021-06-30 YunQiang Su <yunqiang.su@cipunited.com> 2021-06-30 YunQiang Su <yunqiang.su@cipunited.com>
PR mips/28009 PR mips/28009

5
bfd/dwarf2.c
View File

@@ -909,7 +909,8 @@ read_address (struct comp_unit *unit, bfd_byte **ptr, bfd_byte *buf_end)
if (bfd_get_flavour (unit->abfd) == bfd_target_elf_flavour) if (bfd_get_flavour (unit->abfd) == bfd_target_elf_flavour)
signed_vma = get_elf_backend_data (unit->abfd)->sign_extend_vma; signed_vma = get_elf_backend_data (unit->abfd)->sign_extend_vma;
if (unit->addr_size > (size_t) (buf_end - buf)) if (unit->addr_size > (size_t) (buf_end - buf)
|| (buf > buf_end))
{ {
*ptr = buf_end; *ptr = buf_end;
return 0; return 0;
@@ -3097,6 +3098,8 @@ read_ranges (struct comp_unit *unit, struct arange *arange,
if (ranges_ptr < unit->file->dwarf_ranges_buffer) if (ranges_ptr < unit->file->dwarf_ranges_buffer)
return false; return false;
ranges_end = unit->file->dwarf_ranges_buffer + unit->file->dwarf_ranges_size; ranges_end = unit->file->dwarf_ranges_buffer + unit->file->dwarf_ranges_size;
if (ranges_ptr >= ranges_end)
return false;
for (;;) for (;;)
{ {