mirror of
https://git.yoctoproject.org/poky
synced 2026-06-14 10:53:48 +02:00
1e97a1e661
Source: binutils-gdb.git
MR: 73932
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: 49ad5f3244cd51ee6714c1b60cc1c3f84d7de7c8
Description:
i386-dis: Add 2 tests with invalid bnd register
PR binutils/21594
* testsuite/gas/i386/mpx.s: Add 2 tests with invalid bnd
register.
* testsuite/gas/i386/x86-64-mpx.s: Likewise.
* testsuite/gas/i386/mpx.d: Updated.
* testsuite/gas/i386/x86-64-mpx.d: Likewise.
i386-dis: Check valid bnd register
Since there are only 4 bnd registers, return "(bad)" for register
number > 3.
PR binutils/21594
* i386-dis.c (OP_E_register): Check valid bnd register.
(OP_G): Likewise.
Affects: <= 2.28
Author: H.J. Lu <hjl.tools@gmail.com>
(From OE-Core rev: 98b66508f8b382f047d12df430b6e812a9336ab9)
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
61 lines
1.6 KiB
Diff
61 lines
1.6 KiB
Diff
commit 0d96e4df4812c3bad77c229dfef47a9bc115ac12
|
|
Author: H.J. Lu <hjl.tools@gmail.com>
|
|
Date: Thu Jun 15 06:40:17 2017 -0700
|
|
|
|
i386-dis: Check valid bnd register
|
|
|
|
Since there are only 4 bnd registers, return "(bad)" for register
|
|
number > 3.
|
|
|
|
PR binutils/21594
|
|
* i386-dis.c (OP_E_register): Check valid bnd register.
|
|
(OP_G): Likewise.
|
|
|
|
Upstream-Status: Backport
|
|
|
|
CVE: CVE-2017-9755
|
|
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
|
|
|
|
Index: git/opcodes/i386-dis.c
|
|
===================================================================
|
|
--- git.orig/opcodes/i386-dis.c 2017-09-21 15:38:46.907182525 +0530
|
|
+++ git/opcodes/i386-dis.c 2017-09-21 15:38:54.703174976 +0530
|
|
@@ -15211,6 +15211,11 @@
|
|
names = address_mode == mode_64bit ? names64 : names32;
|
|
break;
|
|
case bnd_mode:
|
|
+ if (reg > 0x3)
|
|
+ {
|
|
+ oappend ("(bad)");
|
|
+ return;
|
|
+ }
|
|
names = names_bnd;
|
|
break;
|
|
case indir_v_mode:
|
|
@@ -15751,6 +15756,11 @@
|
|
oappend (names64[modrm.reg + add]);
|
|
break;
|
|
case bnd_mode:
|
|
+ if (modrm.reg > 0x3)
|
|
+ {
|
|
+ oappend ("(bad)");
|
|
+ return;
|
|
+ }
|
|
oappend (names_bnd[modrm.reg]);
|
|
break;
|
|
case v_mode:
|
|
Index: git/opcodes/ChangeLog
|
|
===================================================================
|
|
--- git.orig/opcodes/ChangeLog 2017-09-21 15:38:54.531175122 +0530
|
|
+++ git/opcodes/ChangeLog 2017-09-21 15:45:32.264491166 +0530
|
|
@@ -1,3 +1,9 @@
|
|
+2017-06-15 H.J. Lu <hongjiu.lu@intel.com>
|
|
+
|
|
+ PR binutils/21594
|
|
+ * i386-dis.c (OP_E_register): Check valid bnd register.
|
|
+ (OP_G): Likewise.
|
|
+
|
|
2017-06-15 Nick Clifton <nickc@redhat.com>
|
|
|
|
PR binutils/21586
|