[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Bug binutils/22955] Heap out of bounds read in parse_stab_array_type()
|
From: |
cvs-commit at gcc dot gnu.org |
|
Subject: |
[Bug binutils/22955] Heap out of bounds read in parse_stab_array_type() |
|
Date: |
Tue, 13 Mar 2018 16:12:05 +0000 |
https://sourceware.org/bugzilla/show_bug.cgi?id=22955
--- Comment #1 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot
gnu.org> ---
The master branch has been updated by Nick Clifton <address@hidden>:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=81db3241f2c888c4fae1884444953085be224815
commit 81db3241f2c888c4fae1884444953085be224815
Author: Nick Clifton <address@hidden>
Date: Tue Mar 13 16:10:45 2018 +0000
Add range changing to STABS parsing functions, in order to prevent buffer
overruns.
PR 22955
* stabs.c (parse_number): Add p_end parameter and use it to check
the validity of the pp parameter. Add checks to prevent walking
off the end of the string buffer.
(parse_stab_string): Likewise.
(parse_stab_type): Likewise.
(parse_stab_type_number): Likewise.
(parse_stab_range_type): Likewise.
(parse_stab_sun_builtin_type): Likewise.
(parse_stab_sun_floating_type): Likewise.
(parse_stab_enum_type): Likewise.
(parse_stab_struct_type): Likewise.
(parse_stab_baseclasses): Likewise.
(parse_stab_struct_fields): Likewise.
(parse_stab_cpp_abbrev): Likewise.
(parse_stab_one_struct_field): Likewise.
(parse_stab_members): Likewise.
(parse_stab_tilde_field): Likewise.
(parse_stab_array_type): Likewise.
* parse_stab: Compute the end of the string and then pass it on to
individual parser functions.
--
You are receiving this mail because:
You are on the CC list for the bug.