Files
poky/meta/recipes-devtools/binutils/binutils/0031-CVE-2022-45703-2.patch
Yash Shinde e77b551dbf binutils: Fix CVE-2022-45703
(From OE-Core rev: b2fa5b29462a16b238f8a6a40886b45aa483e963)

Signed-off-by: Yash Shinde <Yash.Shinde@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
2023-10-18 05:13:24 -10:00

32 lines
1.3 KiB
Diff

From 69bfd1759db41c8d369f9dcc98a135c5a5d97299 Mon Sep 17 00:00:00 2001
From: Alan Modra <amodra@gmail.com>
Date: Fri, 18 Nov 2022 11:29:13 +1030
Subject: [PATCH] PR29799 heap buffer overflow in display_gdb_index
dwarf.c:10548
PR 29799
* dwarf.c (display_gdb_index): Typo fix.
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=blobdiff_plain;f=binutils/dwarf.c;h=4bba8dfb81a6df49f5e61b3fae99dd545cc5c7dd;hp=7730293326ac1049451eb4a037ac86d827030700;hb=69bfd1759db41c8d369f9dcc98a135c5a5d97299;hpb=7828dfa93b210b6bbc6596e6e096cc150a9f8aa4]
CVE: CVE-2022-45703
Signed-off-by: yash shinde <yash.shinde@windriver.com>
---
binutils/dwarf.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/binutils/dwarf.c b/binutils/dwarf.c
index 7730293326a..4bba8dfb81a 100644
--- a/binutils/dwarf.c
+++ b/binutils/dwarf.c
@@ -10562,7 +10562,7 @@ display_gdb_index (struct dwarf_section
{
uint64_t low = byte_get_little_endian (address_table + i * 20, 8);
uint64_t high = byte_get_little_endian (address_table + i * 20 + 8, 8);
- uint32_t cu_index = byte_get_little_endian (address_table + i + 20 + 16, 4);
+ uint32_t cu_index = byte_get_little_endian (address_table + i * 20 + 16, 4);
print_dwarf_vma (low, 8);
print_dwarf_vma (high, 8);