This patch fixes a flaw in the SREC parser which could cause a stack overflow

and potential secuiryt breach.

	PR binutils/17510
	* srec.c (srec_bad_byte): Increase size of buf to allow for
	negative values.
	(srec_scan): Use an unsigned char buffer to hold header bytes.
This commit is contained in:
Nick Clifton
2014-10-28 10:48:14 +00:00
parent 6fb9c0f832
commit 708d7d0d11
4 changed files with 11 additions and 4 deletions

View File

@@ -629,7 +629,7 @@ setup_group (bfd *abfd, Elf_Internal_Shdr *hdr, asection *newsect)
memset (shdr->contents, 0, amt);
continue;
}
/* Translate raw contents, a flag word followed by an
array of elf section indices all in target byte order,
to the flag word followed by an array of elf section