diff options
author | Nick Clifton <nickc@redhat.com> | 2014-11-06 14:49:10 +0000 |
---|---|---|
committer | Nick Clifton <nickc@redhat.com> | 2014-11-06 14:49:10 +0000 |
commit | dd9b91de2149ee81d47f708e7b0bbf57da10ad42 (patch) | |
tree | 9abc44b553f584ed318e6747e7f49d1095ea13c6 /binutils/ChangeLog | |
parent | 834107255bbefceb445fa733ebc1ea5d9f41ec7f (diff) | |
download | gdb-dd9b91de2149ee81d47f708e7b0bbf57da10ad42.zip gdb-dd9b91de2149ee81d47f708e7b0bbf57da10ad42.tar.gz gdb-dd9b91de2149ee81d47f708e7b0bbf57da10ad42.tar.bz2 |
Prevent archive memebers with illegal pathnames from being extracted from an archive.
PR binutils/17552, binutils/17533
* bucomm.c (is_valid_archive_path): New function. Returns false
for absolute pathnames and pathnames that include /../.
* bucomm.h (is_valid_archive_path): Add prototype.
* ar.c (extract_file): Use new function to check for valid
pathnames when extracting files from an archive.
* objcopy.c (copy_archive): Likewise.
* doc/binutils.texi: Update documentation to mention the
limitation on pathname of archive members.
Diffstat (limited to 'binutils/ChangeLog')
-rw-r--r-- | binutils/ChangeLog | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/binutils/ChangeLog b/binutils/ChangeLog index 7c3b581..6a04543 100644 --- a/binutils/ChangeLog +++ b/binutils/ChangeLog @@ -1,6 +1,18 @@ +2014-11-06 Nick Clifton <nickc@redhat.com> + + PR binutils/17552, binutils/17533 + * bucomm.c (is_valid_archive_path): New function. Returns false + for absolute pathnames and pathnames that include /../. + * bucomm.h (is_valid_archive_path): Add prototype. + * ar.c (extract_file): Use new function to check for valid + pathnames when extracting files from an archive. + * objcopy.c (copy_archive): Likewise. + * doc/binutils.texi: Update documentation to mention the + limitation on pathname of archive members. + 2014-11-05 Nick Clifton <nickc@redhat.com> - PR binutils/15731 + PR binutils/17531 * readelf.c (printable_section_name): New function. (printable_section_name_from_index): New function. (dump_relocations): Use new function. @@ -22,7 +34,7 @@ 2014-11-05 Nick Clifton <nickc@redhat.com> - PR binutils/15733 + PR binutils/17533 * bucomm.c (is_valid_archive_path): New function. * bucomm.h (is_valid_archive_path): Prototype it. * ar.c (extract_file): Call is_valid_archive_path to verify a |