OpenE2K
/
binutils-gdb
12
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

PR24336, buffer overflow in swap_reloca_in 

PR 24336
	* elflink.c (elf_link_read_relocs_from_section): Handle fuzzed
	object files with sh_size not a multiple of sh_entsize.
This commit is contained in:
Alan Modra 2019-03-15 15:49:27 +10:30
parent 418d4036ee
commit f55b1e3248
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
bfd/ChangeLog
View File

@ -1,3 +1,9 @@
2019-03-15 Alan Modra <amodra@gmail.com>
PR 24336
* elflink.c (elf_link_read_relocs_from_section): Handle fuzzed
object files with sh_size not a multiple of sh_entsize.
2019-03-15 H.J. Lu <hongjiu.lu@intel.com>
PR ld/24338

6
bfd/elflink.c
View File

@ -2523,9 +2523,11 @@ elf_link_read_relocs_from_section (bfd *abfd,
}
erela = (const bfd_byte *) external_relocs;
erelaend = erela + shdr->sh_size;
/* Setting erelaend like this and comparing with <= handles case of
a fuzzed object with sh_size not a multiple of sh_entsize. */
erelaend = erela + shdr->sh_size - shdr->sh_entsize;
irela = internal_relocs;
while (erela < erelaend)
while (erela <= erelaend)
{
bfd_vma r_symndx;