bug-binutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug binutils/22955] Heap out of bounds read in parse_stab_array_type()


From: cvs-commit at gcc dot gnu.org
Subject: [Bug binutils/22955] Heap out of bounds read in parse_stab_array_type()
Date: Tue, 13 Mar 2018 16:12:05 +0000

https://sourceware.org/bugzilla/show_bug.cgi?id=22955

--- Comment #1 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Nick Clifton <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=81db3241f2c888c4fae1884444953085be224815

commit 81db3241f2c888c4fae1884444953085be224815
Author: Nick Clifton <address@hidden>
Date:   Tue Mar 13 16:10:45 2018 +0000

    Add range changing to STABS parsing functions, in order to prevent buffer
overruns.

        PR 22955
        * stabs.c (parse_number): Add p_end parameter and use it to check
        the validity of the pp parameter.  Add checks to prevent walking
        off the end of the string buffer.
        (parse_stab_string): Likewise.
        (parse_stab_type): Likewise.
        (parse_stab_type_number): Likewise.
        (parse_stab_range_type): Likewise.
        (parse_stab_sun_builtin_type): Likewise.
        (parse_stab_sun_floating_type): Likewise.
        (parse_stab_enum_type): Likewise.
        (parse_stab_struct_type): Likewise.
        (parse_stab_baseclasses): Likewise.
        (parse_stab_struct_fields): Likewise.
        (parse_stab_cpp_abbrev): Likewise.
        (parse_stab_one_struct_field): Likewise.
        (parse_stab_members): Likewise.
        (parse_stab_tilde_field): Likewise.
        (parse_stab_array_type): Likewise.
        * parse_stab: Compute the end of the string and then pass it on to
        individual parser functions.

-- 
You are receiving this mail because:
You are on the CC list for the bug.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]