* srec.c (srec_get_section_contents): Return immediately on

count zero.  Check that offset and count are within section.
	* libbfd.c (_bfd_generic_get_section_contents): Check that
	offset + count does not overflow.
This commit is contained in:
Alan Modra
2007-07-26 12:34:43 +00:00
parent b9da616afe
commit e62071b60e
3 changed files with 18 additions and 2 deletions

View File

@@ -781,10 +781,20 @@ srec_get_section_contents (bfd *abfd,
file_ptr offset,
bfd_size_type count)
{
if (count == 0)
return TRUE;
if (offset + count < count
|| offset + count > section->size)
{
bfd_set_error (bfd_error_invalid_operation);
return FALSE;
}
if (section->used_by_bfd == NULL)
{
section->used_by_bfd = bfd_alloc (abfd, section->size);
if (section->used_by_bfd == NULL && section->size != 0)
if (section->used_by_bfd == NULL)
return FALSE;
if (! srec_read_section (abfd, section, section->used_by_bfd))