Fix check for buffer overflow when processing version information.

PR binutils/21148
	* readelf.c (process_version_sections): Include size of auxillary
	version information when checking for buffer overflow.
This commit is contained in:
Nick Clifton 2017-02-13 14:35:24 +00:00
parent 0ee3043f58
commit 4aeb00ad3c
2 changed files with 7 additions and 1 deletions

View File

@ -1,3 +1,9 @@
2017-02-13 Nick Clifton <nickc@redhat.com>
PR binutils/21148
* readelf.c (process_version_sections): Include size of auxillary
version information when checking for buffer overflow.
2017-02-13 Nick Clifton <nickc@redhat.com>
PR binutils/21147

View File

@ -10019,7 +10019,7 @@ process_version_sections (FILE * file)
ent.vd_ndx, ent.vd_cnt);
/* Check for overflow. */
if (ent.vd_aux > (size_t) (endbuf - vstart))
if (ent.vd_aux + sizeof (* eaux) > (size_t) (endbuf - vstart))
break;
vstart += ent.vd_aux;