mirror of
https://github.com/bminor/binutils-gdb.git
synced 2025-12-29 02:20:51 +00:00
Fix memory access violations triggered by running strip on fuzzed binaries.
PR binutils/17512 * coffcode.h (coff_set_arch_mach_hook): Check return value from bfd_malloc. (coff_slurp_line_table): Return FALSE if the line number information was corrupt. (coff_slurp_symbol_table): Return FALSE if the symbol information was corrupt. * mach-o.c (bfd_mach_o_bfd_copy_private_header_data): Always initialise the fields of the dyld_info structure. (bfd_mach_o_build_exec_seg_command): Replace assertion with an error message and a return value. (bfd_mach_o_layout_commands): Change the function to boolean. Return FALSE if the function fails. (bfd_mach_o_build_commands): Fail if bfd_mach_o_layout_commands fails. (bfd_mach_o_read_command): Fail if an unrecognised command is encountered. * peXXigen.c (_bfd_XXi_swap_aouthdr_in): Set bfd_error if the read fails. (slurp_symtab): Check the return from bfd_malloc. (_bfd_XX_bfd_copy_private_bfd_data_common): Fail if the copy encountered an error. (_bfd_XXi_final_link_postscript): Fail if a section could not be copied. * peicode.h (pe_bfd_object_p): Fail if the header could not be swapped in. * tekhex.c (first_phase): Fail if the section is too big. * versados.c (struct esdid): Add content_size field. (process_otr): Use and check the new field. (versados_get_section_contents): Check that the section exists and that the requested data is available. PR binutils/17512 * addr2line.c (main): Call bfd_set_error_program_name. * ar.c (main): Likewise. * coffdump.c (main): Likewise. * cxxfilt.c (main): Likewise. * dlltool.c (main): Likewise. * nlmconv.c (main): Likewise. * nm.c (main): Likewise. * objdump.c (main): Likewise. * size.c (main): Likewise. * srconv.c (main): Likewise. * strings.c (main): Likewise. * sysdump.c (main): Likewise. * windmc.c (main): Likewise. * windres.c (main): Likewise. * objcopy.c (main): Likewise. (copy_relocations_in_section): Check for relocs without associated symbol pointers.
This commit is contained in:
@@ -1,3 +1,24 @@
|
||||
2015-01-21 Nick Clifton <nickc@redhat.com>
|
||||
|
||||
PR binutils/17512
|
||||
* addr2line.c (main): Call bfd_set_error_program_name.
|
||||
* ar.c (main): Likewise.
|
||||
* coffdump.c (main): Likewise.
|
||||
* cxxfilt.c (main): Likewise.
|
||||
* dlltool.c (main): Likewise.
|
||||
* nlmconv.c (main): Likewise.
|
||||
* nm.c (main): Likewise.
|
||||
* objdump.c (main): Likewise.
|
||||
* size.c (main): Likewise.
|
||||
* srconv.c (main): Likewise.
|
||||
* strings.c (main): Likewise.
|
||||
* sysdump.c (main): Likewise.
|
||||
* windmc.c (main): Likewise.
|
||||
* windres.c (main): Likewise.
|
||||
* objcopy.c (main): Likewise.
|
||||
(copy_relocations_in_section): Check for relocs without associated
|
||||
symbol pointers.
|
||||
|
||||
2015-01-21 Ramana Radhakrishnan <ramana.radhakrishnan@arm.com>
|
||||
|
||||
* MAINTAINERS: Add self to ARM maintainers list.
|
||||
|
||||
@@ -423,6 +423,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = *argv;
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -691,6 +691,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
#if BFD_SUPPORTS_PLUGINS
|
||||
bfd_plugin_set_program_name (program_name);
|
||||
#endif
|
||||
|
||||
@@ -500,6 +500,7 @@ main (int ac, char **av)
|
||||
|
||||
program_name = av[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&ac, &av);
|
||||
|
||||
|
||||
@@ -176,6 +176,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -4044,6 +4044,7 @@ main (int ac, char **av)
|
||||
bindtextdomain (PACKAGE, LOCALEDIR);
|
||||
textdomain (PACKAGE);
|
||||
|
||||
bfd_set_error_program_name (program_name);
|
||||
expandargv (&ac, &av);
|
||||
|
||||
while ((c = getopt_long (ac, av,
|
||||
|
||||
@@ -211,6 +211,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -1570,6 +1570,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = *argv;
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
#if BFD_SUPPORTS_PLUGINS
|
||||
bfd_plugin_set_program_name (program_name);
|
||||
#endif
|
||||
|
||||
@@ -2960,9 +2960,13 @@ copy_relocations_in_section (bfd *ibfd, sec_ptr isection, void *obfdarg)
|
||||
|
||||
temp_relpp = (arelent **) xmalloc (relsize);
|
||||
for (i = 0; i < relcount; i++)
|
||||
if (is_specified_symbol (bfd_asymbol_name (*relpp[i]->sym_ptr_ptr),
|
||||
keep_specific_htab))
|
||||
temp_relpp [temp_relcount++] = relpp [i];
|
||||
{
|
||||
/* PR 17512: file: 9e907e0c. */
|
||||
if (relpp[i]->sym_ptr_ptr)
|
||||
if (is_specified_symbol (bfd_asymbol_name (*relpp[i]->sym_ptr_ptr),
|
||||
keep_specific_htab))
|
||||
temp_relpp [temp_relcount++] = relpp [i];
|
||||
}
|
||||
relcount = temp_relcount;
|
||||
free (relpp);
|
||||
relpp = temp_relpp;
|
||||
@@ -4411,6 +4415,9 @@ main (int argc, char *argv[])
|
||||
|
||||
create_symbol_htabs ();
|
||||
|
||||
if (argv != NULL)
|
||||
bfd_set_error_program_name (argv[0]);
|
||||
|
||||
if (is_strip)
|
||||
strip_main (argc, argv);
|
||||
else
|
||||
|
||||
@@ -3495,6 +3495,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = *argv;
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
START_PROGRESS (program_name, 0);
|
||||
|
||||
|
||||
@@ -133,6 +133,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = *argv;
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -1774,6 +1774,7 @@ main (int ac, char **av)
|
||||
|
||||
program_name = av[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&ac, &av);
|
||||
|
||||
|
||||
@@ -164,6 +164,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -686,6 +686,7 @@ main (int ac, char **av)
|
||||
|
||||
program_name = av[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&ac, &av);
|
||||
|
||||
|
||||
@@ -952,6 +952,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
@@ -808,6 +808,7 @@ main (int argc, char **argv)
|
||||
|
||||
program_name = argv[0];
|
||||
xmalloc_set_program_name (program_name);
|
||||
bfd_set_error_program_name (program_name);
|
||||
|
||||
expandargv (&argc, &argv);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user