PR23147, Heap buffer overflow in pe_print_idata

PR 23147
	* peXXigen.c (pe_print_idata): Bound check hint_addr.
This commit is contained in:
Alan Modra 2018-05-09 13:56:34 +09:30
parent 937d92afc3
commit 53db9cf9fc
2 changed files with 6 additions and 1 deletions

View File

@ -1,3 +1,8 @@
2018-05-09 Alan Modra <amodra@gmail.com>
PR 23147
* peXXigen.c (pe_print_idata): Bound check hint_addr.
2018-05-08 Nick Clifton <nickc@redhat.com>
PR 22809

View File

@ -1438,7 +1438,7 @@ pe_print_idata (bfd * abfd, void * vfile)
if (hint_addr == 0)
hint_addr = first_thunk;
if (hint_addr != 0)
if (hint_addr != 0 && hint_addr - adj < datasize)
{
bfd_byte *ft_data;
asection *ft_section;