diff options
| author | Alan Modra <amodra@gmail.com> | 2025-08-17 21:34:17 +0930 |
|---|---|---|
| committer | Alan Modra <amodra@gmail.com> | 2025-08-17 22:32:43 +0930 |
| commit | a5858e81363051a818ea163d52f62d8251097d11 (patch) | |
| tree | a8b155e91b3baadb21905ef94dcc563de848fffd /ld | |
| parent | ddc09604ad38dd325c1cf7f5d9ce37ba4c28464e (diff) | |
| download | binutils-master.zip binutils-master.tar.gz binutils-master.tar.bz2 | |
oss-fuzz generated a total length field of 32, when the header was 40
bytes. Subtracting gave -8ul for the remaining length..
I think we should be sanity checking the total length given in the
header against the remaining buffer length and the size of the header
each time get_version_header is called.
Possibly vallen should be sanity checked inside get_version_header
too, but I'll leave that to someone else.
PR 27686
* resbin.c (bin_to_res_version): Correct error message arg.
Move len vs. buffer length sanity check..
(get_version_header): ..to here. Also sanity check len
against off.
Diffstat (limited to 'ld')
0 files changed, 0 insertions, 0 deletions