[Bug binutils/17767] New: Multiple (>8) buffer overruns due to incorrect value

[sourceware-bugs at internot dot info]

https://sourceware.org/bugzilla/show_bug.cgi?id=17767

            Bug ID: 17767
           Summary: Multiple (>8) buffer overruns due to incorrect value
           Product: binutils
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: sourceware-bugs at internot dot info

Hi,


In multilpe places, such as peigen.c, a buffer overrun may occur when using
memcpy:


310        memcpy (in->x_file.x_fname, ext->x_file.x_fname, FILNMLEN);


x_fname is defined as:
232    char x_fname[E_FILNMLEN];

and:

146#define E_FILNMLEN      14

But, FILNMLEN is used in memcpy, which is:

175#define FILNMLEN        18      /* # characters in a file name.  */



Thanks,

-- 
You are receiving this mail because:
You are on the CC list for the bug.