Toolchain/binutils-gdb
1
0
Fork 0
forked from Imagelibrary/binutils-gdb
Code Pull Requests Activity

asan: alpha-vms: buffer overflow

Browse Source 
* vms-misc.c (_bfd_vms_save_counted_string): Count length byte
	towards maxlen.
This commit is contained in:
Alan Modra
2020-10-25 22:21:45 +10:30
parent 4690795539
commit 0c70050a4b
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
bfd/vms-misc.c
View File

@@ -163,9 +163,12 @@ _bfd_vms_save_sized_string (bfd *abfd, unsigned char *str, size_t size)
char *
_bfd_vms_save_counted_string (bfd *abfd, unsigned char *ptr, size_t maxlen)
{
unsigned int len = *ptr++;
unsigned int len;
if (len > maxlen)
if (maxlen == 0)
return NULL;
len = *ptr++;
if (len > maxlen - 1)
return NULL;
return _bfd_vms_save_sized_string (abfd, ptr, len);
}