diff options
author | Nick Clifton <nickc@redhat.com> | 2021-04-30 12:28:39 +0100 |
---|---|---|
committer | Nick Clifton <nickc@redhat.com> | 2021-04-30 12:28:39 +0100 |
commit | bfbfa6e7f481aa120aa24f8544c45c685aef3971 (patch) | |
tree | 25954f65996e6265633ec0f1b6f003583909a264 /binutils | |
parent | bceb87ef4da7948eb9f39584fb5b4a62f9ed4846 (diff) | |
download | fsf-binutils-gdb-bfbfa6e7f481aa120aa24f8544c45c685aef3971.zip fsf-binutils-gdb-bfbfa6e7f481aa120aa24f8544c45c685aef3971.tar.gz fsf-binutils-gdb-bfbfa6e7f481aa120aa24f8544c45c685aef3971.tar.bz2 |
Fix attempt to free non-allocated pointer when parsing .debug_sup sections.
PR 27796
* dwarf.c (load_debug_sup_file): Allocate memory for filename in
.debug_sup section.
Diffstat (limited to 'binutils')
-rw-r--r-- | binutils/ChangeLog | 6 | ||||
-rw-r--r-- | binutils/dwarf.c | 37 |
2 files changed, 34 insertions, 9 deletions
diff --git a/binutils/ChangeLog b/binutils/ChangeLog index 67fff0b..5d87b19 100644 --- a/binutils/ChangeLog +++ b/binutils/ChangeLog @@ -1,3 +1,9 @@ +2021-04-30 Nick Clifton <nickc@redhat.com> + + PR 27796 + * dwarf.c (load_debug_sup_file): Allocate memory for filename in + .debug_sup section. + 2021-04-29 Nick Clifton <nickc@redhat.com> PR 27594 diff --git a/binutils/dwarf.c b/binutils/dwarf.c index e1f7610..adb5c13 100644 --- a/binutils/dwarf.c +++ b/binutils/dwarf.c @@ -11327,6 +11327,7 @@ load_dwo_file (const char * main_filename, const char * name, const char * dir, /* FIXME: We should check the dwo_id. */ printf (_("%s: Found separate debug object file: %s\n\n"), main_filename, separate_filename); + add_separate_debug_file (separate_filename, separate_handle); /* Note - separate_filename will be freed in free_debug_memory(). */ return separate_handle; @@ -11361,20 +11362,38 @@ load_debug_sup_file (const char * main_filename, void * file) if (filename[0] != '/' && strchr (main_filename, '/')) { char * new_name; - if (asprintf (& new_name, "%.*s/%s", - (int) (strrchr (main_filename, '/') - main_filename), - main_filename, - filename) < 3) - warn (_("unable to construct path for supplementary debug file")); - else - filename = new_name; + int new_len; + + new_len = asprintf (& new_name, "%.*s/%s", + (int) (strrchr (main_filename, '/') - main_filename), + main_filename, + filename); + if (new_len < 3) + { + warn (_("unable to construct path for supplementary debug file")); + if (new_len > -1) + free (new_name); + return; + } + filename = new_name; + } + else + { + /* PR 27796: Make sure that we pass a filename that can be free'd to + add_separate_debug_file(). */ + filename = strdup (filename); + if (filename == NULL) + { + warn (_("out of memory constructing filename for .debug_sup link\n")); + return; + } } - void * handle; - handle = open_debug_file (filename); + void * handle = open_debug_file (filename); if (handle == NULL) { warn (_("unable to open file '%s' referenced from .debug_sup section\n"), filename); + free ((void *) filename); return; } |