diff options
| author | Nick Clifton <nickc@redhat.com> | 2014-10-31 10:10:37 +0000 |
|---|---|---|
| committer | Nick Clifton <nickc@redhat.com> | 2014-10-31 10:10:37 +0000 |
| commit | 7fac9594c41ab180979bdf5927ff7f7e1d13a9e9 (patch) | |
| tree | abd05bafbd9947321990c3999d94fb72ad2b40dd /binutils/NEWS | |
| parent | 02be9a71009c94840f2367aa5554cbe5b71f56d1 (diff) | |
| download | gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.zip gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.tar.gz gdb-7fac9594c41ab180979bdf5927ff7f7e1d13a9e9.tar.bz2 | |
In response to a public outcry the strings program now defaults to using the
--all option which displays text from anywhere in the input file(s). The
default used to be --data, which only displays text from loadable data sections,
but this requires the use of the BFD library. Since the BFD library almost
certainly still contains buffer overrun and/or memory corruption bugs, and
since the strings program is often used to examine malicious code, it was
decided that the --data option option represents a possible security risk.
* strings.c: Add new command line option --data to only scan the
initialized, loadable data secions of binaries. Choose the
default behaviour of --all or --data based upon a configure
option.
* doc/binutils.texi (strings): Update documentation. Include
description of why the --data option might be unsafe.
* configure.ac: Add new option --disable-default-strings-all which
restores the old behaviour of strings using --data by default. If
the option is not used make strings use --all by default.
* NEWS: Mention the new behaviour of strings.
* configure: Regenerate.
* config.in: Regenerate.
Diffstat (limited to 'binutils/NEWS')
| -rw-r--r-- | binutils/NEWS | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/binutils/NEWS b/binutils/NEWS index 126219b..9054494 100644 --- a/binutils/NEWS +++ b/binutils/NEWS @@ -2,6 +2,11 @@ Changes in 2.25: +* Add --data option to strings to only print strings in loadable, initialized + data sections. Change the default behaviour to be --all, but add a new + configure time option of --disable-default-strings-all to restore the old + default behaviour. + * Add --include-all-whitespace to strings. * Add --dump-section option to objcopy. |