Thiruvadi Rajaraman
1ffd39135a
binutils: CVE-2017-12449, CVE-2017_12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459
Source: git://sourceware.org/git/binutils-gdb.git
MR: 73867, 73788, 73762, 73749, 73734
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 29a1fd75a879d40560b3891305b7d9577e26ffe5
Description:
Fix address violation issues encountered when parsing corrupt binaries.
PR 21840
* mach-o.c (bfd_mach_o_read_symtab_strtab): Fail if the symtab
size is -1.
* nlmcode.h (nlm_swap_auxiliary_headers_in): Replace assertion
with error return.
* section.c (bfd_make_section_with_flags): Fail if the name or bfd
are NULL.
* vms-alpha.c (bfd_make_section_with_flags): Correct computation
of end pointer.
(evax_bfd_print_emh): Check for invalid string lengths.
Fix address violations when reading corrupt VMS records.
PR binutils/21618
* vms-alpha.c (evax_bfd_print_emh): Check for insufficient record
length.
(evax_bfd_print_eeom): Likewise.
(evax_bfd_print_egsd): Check for an overlarge record length.
(evax_bfd_print_etir): Likewise.
Affects: <= 2.29
(From OE-Core rev: 62c4dc16dd8fe99cba970c5e7d8dfc063855d4b9)
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-01-07 17:10:07 +00:00
..
2016-09-14 22:22:07 +01:00
2016-09-08 00:32:43 +01:00
2016-07-08 09:57:24 +01:00
2017-08-29 16:50:53 +01:00
2018-01-07 17:10:07 +00:00
2016-02-28 11:32:58 +00:00
2016-10-01 21:45:55 +01:00
2016-09-03 09:58:37 +01:00
2016-07-26 08:56:28 +01:00
2016-07-26 08:56:26 +01:00
2016-02-11 12:27:43 +00:00
2015-12-08 10:20:52 +00:00
2016-10-15 10:01:42 +01:00
2016-09-30 16:51:15 +01:00
2016-07-20 10:28:46 +01:00
2014-02-17 15:28:59 +00:00
2017-10-10 17:30:53 +01:00
2016-06-12 23:47:18 +01:00
2016-02-10 16:06:24 +00:00
2015-12-08 10:20:52 +00:00
2015-12-08 10:20:52 +00:00
2017-08-29 16:50:53 +01:00
2016-08-01 11:47:14 +01:00
2016-06-03 13:13:30 +01:00
2016-09-28 10:16:04 +01:00
2017-08-29 16:50:52 +01:00
2017-08-29 16:50:53 +01:00
2015-12-16 11:56:30 +00:00
2016-02-10 16:06:24 +00:00
2017-03-21 22:39:46 +00:00
2016-10-11 08:27:27 +01:00
2017-08-29 16:50:52 +01:00
2017-03-14 15:20:12 +00:00
2016-08-25 23:03:45 +01:00
2016-01-11 23:26:31 +00:00
2016-08-10 10:46:29 +01:00
2015-08-01 07:34:08 +01:00
2016-06-15 08:35:02 +01:00
2016-02-04 23:39:02 +00:00
2014-01-02 12:50:23 +00:00
2015-01-16 23:08:27 +00:00
2016-08-10 10:46:28 +01:00
2016-10-05 10:10:10 +01:00
2016-09-14 22:22:07 +01:00
2016-05-13 13:41:28 +01:00
2016-08-01 11:47:14 +01:00
2015-12-18 12:18:19 +00:00
2016-07-08 09:57:24 +01:00
2016-09-16 15:24:02 +01:00
2016-05-25 07:50:17 +01:00
2016-10-09 12:31:40 +01:00
2016-05-14 23:05:12 +01:00
2016-07-12 23:10:14 +01:00
2016-06-03 13:13:30 +01:00
2016-08-25 23:03:45 +01:00
2016-09-16 15:24:02 +01:00
2015-12-01 21:32:06 +00:00
2017-11-21 14:43:55 +00:00
2016-06-07 15:22:37 +01:00
2016-09-09 12:12:22 +01:00
2016-08-01 11:47:14 +01:00
2016-06-16 11:11:40 +01:00
2015-09-12 23:01:53 +01:00
2016-09-15 12:15:07 +01:00
2016-06-15 08:35:03 +01:00
2017-01-11 17:21:43 +00:00
2016-05-17 21:19:30 +01:00
2014-11-20 14:08:14 +00:00
2016-09-28 10:16:03 +01:00
2017-01-11 17:21:43 +00:00
2017-12-09 14:34:35 +00:00
2017-09-06 16:53:39 +01:00
2017-09-06 16:53:39 +01:00
2016-08-10 10:46:31 +01:00
2016-03-28 15:55:48 +01:00
2017-03-14 15:21:07 +00:00
2016-09-03 23:45:53 +01:00
2017-11-21 14:43:55 +00:00
2016-07-08 09:57:24 +01:00
2017-08-29 16:50:53 +01:00
2015-12-08 10:20:51 +00:00
2015-12-12 23:42:55 +00:00
2016-08-10 10:46:32 +01:00
2017-01-11 17:21:44 +00:00
2016-06-03 13:13:27 +01:00
2016-02-04 23:39:03 +00:00
2016-07-01 16:22:43 +01:00
2017-11-21 14:43:55 +00:00
2016-08-04 15:22:23 +01:00
2016-08-25 23:03:48 +01:00
2015-12-16 12:12:15 +00:00
2016-09-14 22:22:07 +01:00
2017-01-11 17:21:46 +00:00
2017-06-05 18:00:02 +01:00
2015-06-11 23:59:15 +01:00
2014-03-31 23:04:35 +01:00