diff --git a/binutils/ChangeLog b/binutils/ChangeLog index f099467d3f..ebaedccf7c 100644 --- a/binutils/ChangeLog +++ b/binutils/ChangeLog @@ -1,3 +1,9 @@ +2017-02-13 Nick Clifton + + PR binutils/21148 + * readelf.c (process_version_sections): Include size of auxillary + version information when checking for buffer overflow. + 2017-02-13 Nick Clifton PR binutils/21147 diff --git a/binutils/readelf.c b/binutils/readelf.c index 6fd7ff7a1e..a61befef3f 100644 --- a/binutils/readelf.c +++ b/binutils/readelf.c @@ -10019,7 +10019,7 @@ process_version_sections (FILE * file) ent.vd_ndx, ent.vd_cnt); /* Check for overflow. */ - if (ent.vd_aux > (size_t) (endbuf - vstart)) + if (ent.vd_aux + sizeof (* eaux) > (size_t) (endbuf - vstart)) break; vstart += ent.vd_aux;