[Bug binutils/17531] readelf -a crashes on fuzzed samples

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #57 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "gdb and binutils".

The branch, master has been updated
       via  058037d3a169c91042c9b8549f7d04fd7550bed6 (commit)
      from  5860e3f883597cf6b8a937547015394edc1e8784 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=058037d3a169c91042c9b8549f7d04fd7550bed6

commit 058037d3a169c91042c9b8549f7d04fd7550bed6
Author: Nick Clifton <address@hidden>
Date:   Mon Dec 22 22:44:34 2014 +0000

    More fixes for invalid memory accesses exposed by fuzzed binaries.

        PR binutils/17531
        * dwarf.c (decode_location_expression): Check for an out of range
        value for a DW_OP_GNU_entry_value expression.
        (display_debug_lines_raw): Check for a partial
        .debug_line. section being encountered without a prior, full
        .debug.line section.
        (display_debug_lines_decoded): Likewise.  Also check for
        li_line_range being zero.
        (display_debug_pubnames_worker): Check for an invalid pn_length
        field.
        (read_cie): Add range checks.
        * elfcomm.c (setup_archive): Check for a negative longnames_size.

-----------------------------------------------------------------------

Summary of changes:
 binutils/ChangeLog |   15 +++++++++++
 binutils/dwarf.c   |   70 +++++++++++++++++++++++++++++++++++++++++++---------
 binutils/elfcomm.c |   10 +++++++
 3 files changed, 83 insertions(+), 12 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.