Prevent illegal memory accesses when attempting to read excessively large COFF line number tables.
PR 22376 * coffcode.h (coff_slurp_line_table): Check for an excessively large line number count.
This commit is contained in:
parent
e0115a8446
commit
a67d66eb97
|
@ -1,3 +1,9 @@
|
|||
2017-11-01 Nick Clifton <nickc@redhat.com>
|
||||
|
||||
PR 22376
|
||||
* coffcode.h (coff_slurp_line_table): Check for an excessively
|
||||
large line number count.
|
||||
|
||||
2017-11-01 Nick Clifton <nickc@redhat.com>
|
||||
|
||||
PR 22373
|
||||
|
|
|
@ -4578,6 +4578,14 @@ coff_slurp_line_table (bfd *abfd, asection *asect)
|
|||
|
||||
BFD_ASSERT (asect->lineno == NULL);
|
||||
|
||||
if (asect->lineno_count > asect->size)
|
||||
{
|
||||
_bfd_error_handler
|
||||
(_("%B: warning: line number count (%#lx) exceeds section size (%#lx)"),
|
||||
abfd, (unsigned long) asect->lineno_count, (unsigned long) asect->size);
|
||||
return FALSE;
|
||||
}
|
||||
|
||||
amt = ((bfd_size_type) asect->lineno_count + 1) * sizeof (alent);
|
||||
lineno_cache = (alent *) bfd_alloc (abfd, amt);
|
||||
if (lineno_cache == NULL)
|
||||
|
|
Loading…
Reference in New Issue