aboutsummaryrefslogtreecommitdiff
path: root/bfd/vms-alpha.c
diff options
context:
space:
mode:
authorNick Clifton <nickc@redhat.com>2017-07-24 14:04:04 +0100
committerNick Clifton <nickc@redhat.com>2017-07-24 14:04:04 +0100
commit8a2df5e2df374289e00ecd8f099eb46d76ef982e (patch)
tree9808c7cc729024ff78cee25bd7fa3ded70367b46 /bfd/vms-alpha.c
parentca4cf9b9c622a5695e01f7f5815a7382a31fcf51 (diff)
downloadgdb-8a2df5e2df374289e00ecd8f099eb46d76ef982e.zip
gdb-8a2df5e2df374289e00ecd8f099eb46d76ef982e.tar.gz
gdb-8a2df5e2df374289e00ecd8f099eb46d76ef982e.tar.bz2
Fix another memory access error triggered by attempting to parse a corrupt binary.
PR 21813 (alpha_vms_object_p): Check for a truncated record.
Diffstat (limited to 'bfd/vms-alpha.c')
-rw-r--r--bfd/vms-alpha.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/bfd/vms-alpha.c b/bfd/vms-alpha.c
index 5e9170d7..610b034 100644
--- a/bfd/vms-alpha.c
+++ b/bfd/vms-alpha.c
@@ -2679,6 +2679,9 @@ alpha_vms_object_p (bfd *abfd)
PRIV (recrd.buf_size) = PRIV (recrd.rec_size);
}
+ /* PR 21813: Check for a truncated record. */
+ if (PRIV (recrd.rec_size < test_len))
+ goto error_ret;
/* Read the remaining record. */
remaining = PRIV (recrd.rec_size) - test_len;
to_read = MIN (VMS_BLOCK_SIZE - test_len, remaining);