mirror of
https://git.yoctoproject.org/poky
synced 2026-03-05 06:49:39 +01:00
e7f53f5fe5
Source: binutils-gdb.git MR: 73893 Type: Security Fix Disposition: Backport from 'binutils-gdb.git/master' branch ChangeID: 94c3ef8c1fa2e84e84ad76fb45307848d98817c8 Description: PR 21665 : Fixed multiple heap based buffer overflow Affects: <= 2.28 Author: Nick Clifton <nickc@redhat.com> (From OE-Core rev: a36978f0dd372ec836f63942f965652ca3716e3f) Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com> Reviewed-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
51 lines
1.6 KiB
Diff
51 lines
1.6 KiB
Diff
commit ab27f80c5dceaa23c4ba7f62c0d5d22a5d5dd7a1
|
|
Author: Pedro Alves <palves@redhat.com>
|
|
Date: Tue Jun 27 00:21:25 2017 +0100
|
|
|
|
Fix GDB regressions caused by previous bfd_get_section_contents changes
|
|
|
|
Ref: https://sourceware.org/ml/binutils/2017-06/msg00343.html
|
|
|
|
bfd/ChangeLog:
|
|
2017-06-26 Pedro Alves <palves@redhat.com>
|
|
|
|
PR binutils/21665
|
|
* libbfd.c (_bfd_generic_get_section_contents): Add "count", not
|
|
"sz".
|
|
|
|
Upstream-Status: Backport
|
|
|
|
CVE: CVE-2017-9955
|
|
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
|
|
|
|
Index: git/bfd/libbfd.c
|
|
===================================================================
|
|
--- git.orig/bfd/libbfd.c 2017-09-21 18:01:58.079078554 +0530
|
|
+++ git/bfd/libbfd.c 2017-09-21 18:01:58.063078433 +0530
|
|
@@ -810,7 +810,7 @@
|
|
}
|
|
if (offset + count < count
|
|
|| offset + count > sz
|
|
- || (section->filepos + offset + sz) > (bfd_size_type) filesz)
|
|
+ || (section->filepos + offset + count) > (bfd_size_type) filesz)
|
|
{
|
|
bfd_set_error (bfd_error_invalid_operation);
|
|
return FALSE;
|
|
Index: git/bfd/ChangeLog
|
|
===================================================================
|
|
--- git.orig/bfd/ChangeLog 2017-09-21 18:01:32.258884464 +0530
|
|
+++ git/bfd/ChangeLog 2017-09-21 18:03:42.955872017 +0530
|
|
@@ -11,6 +11,12 @@
|
|
of end pointer.
|
|
(evax_bfd_print_emh): Check for invalid string lengths.
|
|
|
|
+2017-06-26 Pedro Alves <palves@redhat.com>
|
|
+
|
|
+ PR binutils/21665
|
|
+ * libbfd.c (_bfd_generic_get_section_contents): Add "count", not
|
|
+ "sz".
|
|
+
|
|
2017-06-26 H.J. Lu <hongjiu.lu@intel.com>
|
|
|
|
PR binutils/21665
|