mirror of
https://git.yoctoproject.org/poky
synced 2026-03-10 17:29:40 +01:00
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b425859021d17adf62f06fb904797cf8642986ad] (From OE-Core rev: d27416eb05643afcd80435dd7ed27d6cd3d85650) Signed-off-by: Ashish Sharma <asharma@mvista.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
34 lines
1003 B
Diff
34 lines
1003 B
Diff
From b425859021d17adf62f06fb904797cf8642986ad Mon Sep 17 00:00:00 2001
|
|
From: Nick Clifton <nickc@redhat.com>
|
|
Date: Wed, 5 Feb 2025 16:27:38 +0000
|
|
Subject: [PATCH] Fix another illegal memory access triggered by corrupt ELF
|
|
input files.
|
|
|
|
PR 32644
|
|
|
|
Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=patch;h=b425859021d17adf62f06fb904797cf8642986ad]
|
|
CVE: CVE-2025-1182
|
|
Signed-off-by: Ashish Sharma <asharma@mvista.com>
|
|
|
|
bfd/elflink.c | 4 ++++
|
|
1 file changed, 4 insertions(+)
|
|
|
|
diff --git a/bfd/elflink.c b/bfd/elflink.c
|
|
index bf940942ec3..df6eb250961 100644
|
|
--- a/bfd/elflink.c
|
|
+++ b/bfd/elflink.c
|
|
@@ -15116,6 +15116,10 @@ bfd_elf_reloc_symbol_deleted_p (bfd_vma offset, void *cookie)
|
|
}
|
|
else
|
|
{
|
|
+ if (r_symndx >= rcookie->locsymcount)
|
|
+ /* This can happen with corrupt input. */
|
|
+ return false;
|
|
+
|
|
/* It's not a relocation against a global symbol,
|
|
but it could be a relocation against a local
|
|
symbol for a discarded section. */
|
|
--
|
|
2.43.5
|
|
|