[Bug ld/24332] Heap-buffer-overflow in bfd_getl16 and bfd_getl64 in bfd, respectively

2019-03-14 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=24332

Nick Clifton  changed:

   What|Removed |Added

 Status|ASSIGNED|RESOLVED
 Resolution|--- |FIXED

--- Comment #5 from Nick Clifton  ---
Hi wcventure,

  Thanks for reporting this bug.  I have checked in a patch to add extra
  checking when parsing the version information for symbols.  This fixes
  the problem.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/24332] Heap-buffer-overflow in bfd_getl16 and bfd_getl64 in bfd, respectively

2019-03-14 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=24332

--- Comment #4 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by Nick Clifton :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=be22c732bf873e0c7e8a08564c97cafdfcf153bb

commit be22c732bf873e0c7e8a08564c97cafdfcf153bb
Author: Nick Clifton 
Date:   Thu Mar 14 14:45:32 2019 +

Fix illegal memory access parsing a corrupt ELF file.

PR 24332
* elflink.c (elf_link_add_object_symbols): Add new local variable
extversym_end.  Initialise it to point to the end of the version
symbol table, if present.  Check it when initialising and updating
the ever pointer.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/24332] Heap-buffer-overflow in bfd_getl16 and bfd_getl64 in bfd, respectively

2019-03-14 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=24332

Nick Clifton  changed:

   What|Removed |Added

 Status|UNCONFIRMED |ASSIGNED
   Last reconfirmed||2019-03-14
 CC||nickc at redhat dot com
 Ever confirmed|0   |1

--- Comment #3 from Nick Clifton  ---
testing a fix now

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/24332] Heap-buffer-overflow in bfd_getl16 and bfd_getl64 in bfd, respectively

2019-03-14 Thread wcventure at 126 dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=24332

--- Comment #2 from wcventure  ---
Created attachment 11672
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11672=edit
POC2

POC2 for bfd_getl64

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/24332] Heap-buffer-overflow in bfd_getl16 and bfd_getl64 in bfd, respectively

2019-03-14 Thread wcventure at 126 dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=24332

--- Comment #1 from wcventure  ---
Created attachment 11671
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11671=edit
POC1

POC1 for bfd_getl16

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils