Closes another memory corruption, this time due to heap overrun.
PR binutils/17512 * coffgen.c (coff_get_normalized_symtab): Prevent buffer overrun.
This commit is contained in:
parent
3bdff46b67
commit
7e760b06b2
2 changed files with 11 additions and 2 deletions
|
@ -1,3 +1,8 @@
|
|||
2014-10-30 Nick Clifton <nickc@redhat.com>
|
||||
|
||||
PR binutils/17512
|
||||
* coffgen.c (coff_get_normalized_symtab): Prevent buffer overrun.
|
||||
|
||||
2014-10-29 Nick Clifton <nickc@redhat.com>
|
||||
|
||||
* elf.c (bfd_section_from_shdr): Fix heap use after free memory
|
||||
|
|
|
@ -1766,8 +1766,8 @@ coff_get_normalized_symtab (bfd *abfd)
|
|||
raw_src < raw_end;
|
||||
raw_src += symesz, internal_ptr++)
|
||||
{
|
||||
|
||||
unsigned int i;
|
||||
|
||||
bfd_coff_swap_sym_in (abfd, (void *) raw_src,
|
||||
(void *) & internal_ptr->u.syment);
|
||||
symbol_ptr = internal_ptr;
|
||||
|
@ -1777,6 +1777,10 @@ coff_get_normalized_symtab (bfd *abfd)
|
|||
i++)
|
||||
{
|
||||
internal_ptr++;
|
||||
/* PR 17512: Prevent buffer overrun. */
|
||||
if (internal_ptr >= internal_end)
|
||||
return NULL;
|
||||
|
||||
raw_src += symesz;
|
||||
bfd_coff_swap_aux_in (abfd, (void *) raw_src,
|
||||
symbol_ptr->u.syment.n_type,
|
||||
|
|
Loading…
Reference in a new issue