[Bug binutils/27291] New: False results/ misinformation, unpredictable behavior and potential crash through Integer Overflow in bfd_get_section_contents()

[dennis.r at columbia dot edu]

https://sourceware.org/bugzilla/show_bug.cgi?id=27291

            Bug ID: 27291
           Summary: False results/ misinformation, unpredictable behavior
                    and potential crash through Integer Overflow in
                    bfd_get_section_contents()
           Product: binutils
           Version: 2.36
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: dennis.r at columbia dot edu
  Target Milestone: ---

= Location = 
Section.c:1556
https://sourcegraph.com/github.com/bminor/binutils-gdb@a7e3d08a26edefa411269636d7dcae7dd2736659/-/blob/bfd/section.c#L1556

= Description =
Adding 2 64bit numbers in if clause may cause unexpected behavior in offset +
count > sz. The execution may then falsely miss this branch

= Fix =
Check inf INT_MAX - offset < count

-- 
You are receiving this mail because:
You are on the CC list for the bug.