[Bug binutils/17531] readelf -a crashes on fuzzed samples

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #26 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "gdb and binutils".

The branch, master has been updated
       via  8b73c35699b4b1da558be29ac3c90aee0e0e1e49 (commit)
      from  51b26797b4a05304e4d00e2fd77810e38147bb7f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8b73c35699b4b1da558be29ac3c90aee0e0e1e49

commit 8b73c35699b4b1da558be29ac3c90aee0e0e1e49
Author: Nick Clifton <address@hidden>
Date:   Tue Nov 11 20:50:03 2014 +0000

    Fix invalid memory accesses for more corrupt binary files.

        PR binutils/17531
        * binutils/readelf.c (dynamic_nent): Change type to size_t.
        (slurp_rela_relocs): Use size_t type for nrelas.
        (slurp_rel_relocs): Likewise.
        (get_program_headers): Improve out of memory error message.
        (get_32bit_section_headers): Likewise.
        (get_32bit_section_headers): Likewise.
        (get_64bit_section_headers): Likewise.
        (get_32bit_elf_symbols): Likewise.
        (get_64bit_elf_symbols): Likewise.
        (process_section_groups): Likewise.
        (get_32bit_dynamic_section): Likewise.
        (get_64bit_dynamic_section): Likewise.
        (process_dynamic_section): Likewise.
        (process_version_sections): Likewise.
        (get_symbol_index_type): Likewise.
        (process_mips_specific): Likewise.
        (process_corefile_note_segment): Likewise.
        (process_version_sections): Use size_t type for total.
        (get_dynamic_data): Change type of number parameter to size_t.
        Improve out of memory error messages.
        (process_symbol_table): Change type of nbuckets and nchains to
        size_t.  Skip processing of sections headers if there are none.
        Improve out of memory error messages.

-----------------------------------------------------------------------

Summary of changes:
 binutils/ChangeLog |   27 ++++++++++++++++
 binutils/readelf.c |   87 +++++++++++++++++++++++++++++----------------------
 2 files changed, 76 insertions(+), 38 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.