diff options
| author | Nick Clifton <nickc@redhat.com> | 2014-10-28 10:48:14 +0000 |
|---|---|---|
| committer | Nick Clifton <nickc@redhat.com> | 2014-10-28 10:48:14 +0000 |
| commit | 708d7d0d11f0f2d776171979aa3479e8e12a38a0 (patch) | |
| tree | 3cd4fc5f4d2774c3fc791cc4345dd5ba15189b7f /bfd/elf.c | |
| parent | 6fb9c0f83252a79b2f1a3f8e75fa117ca7a4d589 (diff) | |
| download | gdb-708d7d0d11f0f2d776171979aa3479e8e12a38a0.zip gdb-708d7d0d11f0f2d776171979aa3479e8e12a38a0.tar.gz gdb-708d7d0d11f0f2d776171979aa3479e8e12a38a0.tar.bz2 | |
This patch fixes a flaw in the SREC parser which could cause a stack overflow
and potential secuiryt breach.
PR binutils/17510
* srec.c (srec_bad_byte): Increase size of buf to allow for
negative values.
(srec_scan): Use an unsigned char buffer to hold header bytes.
Diffstat (limited to 'bfd/elf.c')
| -rw-r--r-- | bfd/elf.c | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -629,7 +629,7 @@ setup_group (bfd *abfd, Elf_Internal_Shdr *hdr, asection *newsect) memset (shdr->contents, 0, amt); continue; } - + /* Translate raw contents, a flag word followed by an array of elf section indices all in target byte order, to the flag word followed by an array of elf section |