[Bug binutils/20499] gprof: segmentation fault on invalid symbol file

[nickc at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=20499

Nick Clifton <nickc at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
   Last reconfirmed|                            |2016-08-24
         Resolution|FIXED                       |---
     Ever confirmed|0                           |1

--- Comment #11 from Nick Clifton <nickc at redhat dot com> ---
(In reply to Tobias Stoeckmann from comment #10)
> Challenge accepted. :D

oops!  And I thought that this issue was resolved. :-)

> $ for ((i = 0; i < 21474837; i++))
> > do
> >     echo "a t a"
> > done > syms
> $ gprof -S syms /bin/ls
> Segmentation fault

*sigh*.  OK - how about this additional patch (which I am about to upload).  It
makes two changes - the num_of_syms_in() function now returns an unsigned int
as the count.  Plus it adds a check to the loop in core_create_syms_from()
which should prevent buffer overflow.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.