Thiruvadi Rajaraman
c2b6a93e14
binutils: CVE-2017-12451
Source: git://sourceware.org/git/binutils-gdb.git
MR: 73840
Type: Security Fix
Disposition: Backport from binutils-2_29-branch
ChangeID: 582c686f18c059d665189a6a09df3a8cc4a3b093
Description:
Fix address violation when attempting to read a corrupt field in a COFF archive header structure.
PR 21786
* coff-rs6000.c (_bfd_strntol): New function.
(_bfd_strntoll): New function.
(GET_VALUE_IN_FIELD): New macro.
(EQ_VALUE_IN_FIELD): new macro.
(_bfd_xcoff_slurp_armap): Use new macros.
(_bfd_xcoff_archive_p): Likewise.
(_bfd_xcoff_read_ar_hdr): Likewise.
(_bfd_xcoff_openr_next_archived_file): Likewise.
(_bfd_xcoff_stat_arch_elt): Likewise.
Extend previous fix to coff-rs6000.c to coff64-rs6000.c
PR 21786
* coff64-rs6000.c (_bfd_strntol): New function.
(_bfd_strntoll): New function.
(GET_VALUE_IN_FIELD): New macro.
(xcoff64_slurp_armap): Use new macros.
Affects: <= 2.29
(From OE-Core rev: 62eeac8e4684c129af6f36aa7c2b91270a5dacde)
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-01-07 17:10:07 +00:00
..
2016-09-14 22:22:07 +01:00
2016-09-08 00:32:43 +01:00
2016-07-08 09:57:24 +01:00
2017-08-29 16:50:53 +01:00
2018-01-07 17:10:07 +00:00
2016-02-28 11:32:58 +00:00
2016-10-01 21:45:55 +01:00
2016-09-03 09:58:37 +01:00
2016-07-26 08:56:28 +01:00
2016-07-26 08:56:26 +01:00
2016-02-11 12:27:43 +00:00
2015-12-08 10:20:52 +00:00
2016-10-15 10:01:42 +01:00
2016-09-30 16:51:15 +01:00
2016-07-20 10:28:46 +01:00
2014-02-17 15:28:59 +00:00
2017-10-10 17:30:53 +01:00
2016-06-12 23:47:18 +01:00
2016-02-10 16:06:24 +00:00
2015-12-08 10:20:52 +00:00
2015-12-08 10:20:52 +00:00
2017-08-29 16:50:53 +01:00
2016-08-01 11:47:14 +01:00
2016-06-03 13:13:30 +01:00
2016-09-28 10:16:04 +01:00
2017-08-29 16:50:52 +01:00
2017-08-29 16:50:53 +01:00
2015-12-16 11:56:30 +00:00
2016-02-10 16:06:24 +00:00
2017-03-21 22:39:46 +00:00
2016-10-11 08:27:27 +01:00
2017-08-29 16:50:52 +01:00
2017-03-14 15:20:12 +00:00
2016-08-25 23:03:45 +01:00
2016-01-11 23:26:31 +00:00
2016-08-10 10:46:29 +01:00
2015-08-01 07:34:08 +01:00
2016-06-15 08:35:02 +01:00
2016-02-04 23:39:02 +00:00
2014-01-02 12:50:23 +00:00
2015-01-16 23:08:27 +00:00
2016-08-10 10:46:28 +01:00
2016-10-05 10:10:10 +01:00
2016-09-14 22:22:07 +01:00
2016-05-13 13:41:28 +01:00
2016-08-01 11:47:14 +01:00
2015-12-18 12:18:19 +00:00
2016-07-08 09:57:24 +01:00
2016-09-16 15:24:02 +01:00
2016-05-25 07:50:17 +01:00
2016-10-09 12:31:40 +01:00
2016-05-14 23:05:12 +01:00
2016-07-12 23:10:14 +01:00
2016-06-03 13:13:30 +01:00
2016-08-25 23:03:45 +01:00
2016-09-16 15:24:02 +01:00
2015-12-01 21:32:06 +00:00
2017-11-21 14:43:55 +00:00
2016-06-07 15:22:37 +01:00
2016-09-09 12:12:22 +01:00
2016-08-01 11:47:14 +01:00
2016-06-16 11:11:40 +01:00
2015-09-12 23:01:53 +01:00
2016-09-15 12:15:07 +01:00
2016-06-15 08:35:03 +01:00
2017-01-11 17:21:43 +00:00
2016-05-17 21:19:30 +01:00
2014-11-20 14:08:14 +00:00
2016-09-28 10:16:03 +01:00
2017-01-11 17:21:43 +00:00
2017-12-09 14:34:35 +00:00
2017-09-06 16:53:39 +01:00
2017-09-06 16:53:39 +01:00
2016-08-10 10:46:31 +01:00
2016-03-28 15:55:48 +01:00
2017-03-14 15:21:07 +00:00
2016-09-03 23:45:53 +01:00
2017-11-21 14:43:55 +00:00
2016-07-08 09:57:24 +01:00
2017-08-29 16:50:53 +01:00
2015-12-08 10:20:51 +00:00
2015-12-12 23:42:55 +00:00
2016-08-10 10:46:32 +01:00
2017-01-11 17:21:44 +00:00
2016-06-03 13:13:27 +01:00
2016-02-04 23:39:03 +00:00
2016-07-01 16:22:43 +01:00
2017-11-21 14:43:55 +00:00
2016-08-04 15:22:23 +01:00
2016-08-25 23:03:48 +01:00
2015-12-16 12:12:15 +00:00
2016-09-14 22:22:07 +01:00
2017-01-11 17:21:46 +00:00
2017-06-05 18:00:02 +01:00
2015-06-11 23:59:15 +01:00
2014-03-31 23:04:35 +01:00