diff options
| author | Alan Modra <amodra@gmail.com> | 2023-08-23 08:18:39 +0930 |
|---|---|---|
| committer | Alan Modra <amodra@gmail.com> | 2023-08-23 11:03:52 +0930 |
| commit | 847fb383d83039b194f68d9e09974a3de4095eb5 (patch) | |
| tree | 8dc777d49be7cb4c0e4a7ff6776b13897ee1efa8 /gdb/ui-out.c | |
| parent | c5ed8c6376e755e0a138be4a30469caa6611a5f7 (diff) | |
| download | binutils-847fb383d83039b194f68d9e09974a3de4095eb5.zip binutils-847fb383d83039b194f68d9e09974a3de4095eb5.tar.gz binutils-847fb383d83039b194f68d9e09974a3de4095eb5.tar.bz2 | |
kvx: asan: out-of-bounds read
kvx-parse.c:parse_with_restarts does
if (!tok.insn[tok.begin])
tok.class_id = -3;
then a little later
printf_debug (1, "\nEntering rule: %d (Trying to match: (%s)[%d])\n", jump_target,
TOKEN_NAME (CLASS_ID (tok)), CLASS_ID (tok));
This results in a buffer overrun in TOKEN_NAME. Fix that.
* config/tc-kvx.h (TOKEN_NAME): Check for tok <= 0, not just -1.
Diffstat (limited to 'gdb/ui-out.c')
0 files changed, 0 insertions, 0 deletions