Blame binutils-CVE-2018-10372.patch
|
Nick Clifton |
25d3f6 |
--- binutils.orig/binutils/dwarf.c 2018-07-11 11:45:09.971024884 +0100
|
|
Nick Clifton |
25d3f6 |
+++ binutils-2.29/binutils/dwarf.c 2018-07-11 14:16:38.417025086 +0100
|
|
Nick Clifton |
25d3f6 |
@@ -8509,7 +8509,18 @@ process_cu_tu_index (struct dwarf_sectio
|
|
Nick Clifton |
25d3f6 |
}
|
|
Nick Clifton |
25d3f6 |
|
|
Nick Clifton |
25d3f6 |
if (!do_display)
|
|
Nick Clifton |
25d3f6 |
- memcpy (&this_set[row - 1].signature, ph, sizeof (uint64_t));
|
|
Nick Clifton |
25d3f6 |
+ {
|
|
Nick Clifton |
25d3f6 |
+ size_t num_copy = sizeof (uint64_t);
|
|
Nick Clifton |
25d3f6 |
+
|
|
Nick Clifton |
25d3f6 |
+ /* PR 23064: Beware of buffer overflow. */
|
|
Nick Clifton |
25d3f6 |
+ if (ph + num_copy < limit)
|
|
Nick Clifton |
25d3f6 |
+ memcpy (&this_set[row - 1].signature, ph, num_copy);
|
|
Nick Clifton |
25d3f6 |
+ else
|
|
Nick Clifton |
25d3f6 |
+ {
|
|
Nick Clifton |
25d3f6 |
+ warn (_("Signature (%p) extends beyond end of space in section\n"), ph);
|
|
Nick Clifton |
25d3f6 |
+ return 0;
|
|
Nick Clifton |
25d3f6 |
+ }
|
|
Nick Clifton |
25d3f6 |
+ }
|
|
Nick Clifton |
25d3f6 |
|
|
Nick Clifton |
25d3f6 |
prow = poffsets + (row - 1) * ncols * 4;
|
|
Nick Clifton |
25d3f6 |
/* PR 17531: file: b8ce60a8. */
|