diff options
| author | Nick Clifton <nickc@redhat.com> | 2017-11-28 13:20:31 +0000 |
|---|---|---|
| committer | Nick Clifton <nickc@redhat.com> | 2017-11-28 13:20:31 +0000 |
| commit | b23dc97fe237a1d9e850d7cbeee066183a00630b (patch) | |
| tree | 20c22c6c0f5c79582c14669cbe3f34fe0304f210 /bfd/coff-m88k.c | |
| parent | 6c6bc899302deb7c9b14f71da79c0fffc992204e (diff) | |
| download | gdb-b23dc97fe237a1d9e850d7cbeee066183a00630b.zip gdb-b23dc97fe237a1d9e850d7cbeee066183a00630b.tar.gz gdb-b23dc97fe237a1d9e850d7cbeee066183a00630b.tar.bz2 | |
Fix a memory access violation when attempting to parse a corrupt COFF binary with a relocation that points beyond the end of the section to be relocated.users/ARM/embedded-gdb-master-2017q4users/ARM/embedded-binutils-master-2017q4
PR 22506
* reloc.c (reloc_offset_in_range): Rename to
bfd_reloc_offset_in_range and export.
(bfd_perform_relocation): Rename function invocation.
(bfd_install_relocation): Likewise.
(bfd_final_link_relocate): Likewise.
* bfd-in2.h: Regenerate.
* coff-arm.c (coff_arm_reloc): Use bfd_reloc_offset_in_range.
* coff-i386.c (coff_i386_reloc): Likewise.
* coff-i860.c (coff_i860_reloc): Likewise.
* coff-m68k.c (mk68kcoff_common_addend_special_fn): Likewise.
* coff-m88k.c (m88k_special_reloc): Likewise.
* coff-mips.c (mips_reflo_reloc): Likewise.
* coff-x86_64.c (coff_amd64_reloc): Likewise.
Diffstat (limited to 'bfd/coff-m88k.c')
| -rw-r--r-- | bfd/coff-m88k.c | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/bfd/coff-m88k.c b/bfd/coff-m88k.c index ebe4fd3..6314bd3 100644 --- a/bfd/coff-m88k.c +++ b/bfd/coff-m88k.c @@ -72,10 +72,17 @@ m88k_special_reloc (bfd *abfd, { bfd_vma output_base = 0; bfd_vma addr = reloc_entry->address; - bfd_vma x = bfd_get_16 (abfd, (bfd_byte *) data + addr); + bfd_vma x; asection *reloc_target_output_section; long relocation = 0; + if (! bfd_reloc_offset_in_range (howto, abfd, input_section, + reloc_entry->address + * bfd_octets_per_byte (abfd))) + return bfd_reloc_outofrange; + + x = bfd_get_16 (abfd, (bfd_byte *) data + addr); + /* Work out which section the relocation is targeted at and the initial relocation command value. */ |