mirror of
https://git.yoctoproject.org/poky
synced 2026-04-29 00:32:14 +02:00
c6848d874c
PR32858 ld segfault on fuzzed object We missed one place where it is necessary to check for empty groups. PR32829, SEGV on objdump function debug_type_samep u.kenum is always non-NULL, see debug_make_enum_type. Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=d1458933830456e54223d9fc61f0d9b3a19256f5] && [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a] (From OE-Core rev: 7eb29f802b272dec19c5bfdce93155d99bac918d) Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
39 lines
1.3 KiB
Diff
39 lines
1.3 KiB
Diff
From: Alan Modra <amodra@gmail.com>
|
|
Date: Tue, 1 Apr 2025 22:36:54 +1030
|
|
|
|
PR32829, SEGV on objdump function debug_type_samep
|
|
u.kenum is always non-NULL, see debug_make_enum_type.
|
|
|
|
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a]
|
|
CVE: CVE-2025-5245
|
|
|
|
Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com>
|
|
|
|
diff --git a/binutils/debug.c b/binutils/debug.c
|
|
index dcc8ccde..465b18e7 100644
|
|
--- a/binutils/debug.c
|
|
+++ b/binutils/debug.c
|
|
@@ -2554,9 +2554,6 @@ debug_write_type (struct debug_handle *info,
|
|
case DEBUG_KIND_UNION_CLASS:
|
|
return debug_write_class_type (info, fns, fhandle, type, tag);
|
|
case DEBUG_KIND_ENUM:
|
|
- if (type->u.kenum == NULL)
|
|
- return (*fns->enum_type) (fhandle, tag, (const char **) NULL,
|
|
- (bfd_signed_vma *) NULL);
|
|
return (*fns->enum_type) (fhandle, tag, type->u.kenum->names,
|
|
type->u.kenum->values);
|
|
case DEBUG_KIND_POINTER:
|
|
@@ -3098,9 +3095,9 @@ debug_type_samep (struct debug_handle *info, struct debug_type_s *t1,
|
|
break;
|
|
|
|
case DEBUG_KIND_ENUM:
|
|
- if (t1->u.kenum == NULL)
|
|
- ret = t2->u.kenum == NULL;
|
|
- else if (t2->u.kenum == NULL)
|
|
+ if (t1->u.kenum->names == NULL)
|
|
+ ret = t2->u.kenum->names == NULL;
|
|
+ else if (t2->u.kenum->names == NULL)
|
|
ret = false;
|
|
else
|
|
{
|