mirror of
https://git.yoctoproject.org/poky
synced 2026-06-14 10:53:48 +02:00
bf0d750159
Source: binutils-gdb.git MR: 74036 Type: Security Fix Disposition: Backport from binutils-2_29 ChangeID: b25bffca0b51e9c13ba752534b64bd28a147a135 Description: Fix address violation parsing a corrupt ieee binary. PR binutils/21581 (ieee_archive_p): Use a static buffer to avoid compiler bugs. Affects: <= 2.28 Author: Nick Clifton <nickc@redhat.com> (From OE-Core rev: c12bb8d25b9af2df8cbff0a457c2d049efdf49d9) Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com> Reviewed-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
41 lines
1.3 KiB
Diff
41 lines
1.3 KiB
Diff
commit 62b76e4b6e0b4cb5b3e0053d1de4097b32577049
|
|
Author: Nick Clifton <nickc@redhat.com>
|
|
Date: Thu Jun 15 13:08:47 2017 +0100
|
|
|
|
Fix address violation parsing a corrupt ieee binary.
|
|
|
|
PR binutils/21581
|
|
(ieee_archive_p): Use a static buffer to avoid compiler bugs.
|
|
|
|
Upstream-Status: Backport
|
|
|
|
CVE: CVE-2017-9747
|
|
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
|
|
|
|
Index: git/bfd/ieee.c
|
|
===================================================================
|
|
--- git.orig/bfd/ieee.c 2017-09-21 14:37:12.152903139 +0530
|
|
+++ git/bfd/ieee.c 2017-09-21 14:37:12.208903477 +0530
|
|
@@ -1353,7 +1353,7 @@
|
|
{
|
|
char *library;
|
|
unsigned int i;
|
|
- unsigned char buffer[512];
|
|
+ static unsigned char buffer[512];
|
|
file_ptr buffer_offset = 0;
|
|
ieee_ar_data_type *save = abfd->tdata.ieee_ar_data;
|
|
ieee_ar_data_type *ieee;
|
|
Index: git/bfd/ChangeLog
|
|
===================================================================
|
|
--- git.orig/bfd/ChangeLog 2017-09-21 14:37:12.152903139 +0530
|
|
+++ git/bfd/ChangeLog 2017-09-21 14:45:57.020150977 +0530
|
|
@@ -78,6 +78,8 @@
|
|
PR binutils/21582
|
|
* ieee.c (ieee_object_p): Use a static buffer to avoid compiler
|
|
bugs.
|
|
+ PR binutils/21581
|
|
+ (ieee_archive_p): Likewise.
|
|
|
|
2017-04-29 Alan Modra <amodra@gmail.com>
|
|
|