diff options
| author | H.J. Lu <hjl.tools@gmail.com> | 2018-07-27 13:20:51 -0700 |
|---|---|---|
| committer | H.J. Lu <hjl.tools@gmail.com> | 2018-07-27 13:23:31 -0700 |
| commit | 4591b7db23bf5f58f6dbd81a5d9f926bf765cd09 (patch) | |
| tree | f784ed333517788b1255d37830c20a3e72454553 /sysdeps/x86 | |
| parent | 97f2237efa7e2cf269f925fe009a338eabcbc7f0 (diff) | |
| download | glibc-4591b7db23bf5f58f6dbd81a5d9f926bf765cd09.zip glibc-4591b7db23bf5f58f6dbd81a5d9f926bf765cd09.tar.gz glibc-4591b7db23bf5f58f6dbd81a5d9f926bf765cd09.tar.bz2 | |
x86/CET: Don't parse beyond the note end
Simply check if "ptr < ptr_end" since "ptr" is always incremented by 8.
Reviewed-by: Carlos O'Donell <carlos@redhat.com>
* sysdeps/x86/dl-prop.h (_dl_process_cet_property_note): Don't
parse beyond the note end.
Diffstat (limited to 'sysdeps/x86')
| -rw-r--r-- | sysdeps/x86/dl-prop.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sysdeps/x86/dl-prop.h b/sysdeps/x86/dl-prop.h index d56e20a..35d3f16 100644 --- a/sysdeps/x86/dl-prop.h +++ b/sysdeps/x86/dl-prop.h @@ -73,7 +73,7 @@ _dl_process_cet_property_note (struct link_map *l, unsigned char *ptr = (unsigned char *) (note + 1) + 4; unsigned char *ptr_end = ptr + note->n_descsz; - while (1) + while (ptr < ptr_end) { unsigned int type = *(unsigned int *) ptr; unsigned int datasz = *(unsigned int *) (ptr + 4); |