diff options
| author | Nick Clifton <nickc@redhat.com> | 2015-02-13 12:14:05 +0000 |
|---|---|---|
| committer | Nick Clifton <nickc@redhat.com> | 2015-02-13 12:14:05 +0000 |
| commit | 951eaaec17411eba4debe19781f6b8b54306256e (patch) | |
| tree | 1be6fd05bc2f063241cddccb211b06acfc99290b /binutils/srconv.c | |
| parent | f641dd969f91a83adf319b269c2411141b0a26a9 (diff) | |
| download | gdb-951eaaec17411eba4debe19781f6b8b54306256e.zip gdb-951eaaec17411eba4debe19781f6b8b54306256e.tar.gz gdb-951eaaec17411eba4debe19781f6b8b54306256e.tar.bz2 | |
Fix illegal memory access errors triggered by running srconv on fuzzed binaries.
PR binutils/17512
* dwarf.c (read_leb128): Fix test for shift becoming too large.
* coffgrok.c (do_define): Add check for type size overflow.
* srconv.c (walk_tree_sfile): Check that enough sections are
available before parsing.
(prescan): Likewise.
Diffstat (limited to 'binutils/srconv.c')
| -rw-r--r-- | binutils/srconv.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/binutils/srconv.c b/binutils/srconv.c index 63c6940..7abbb66 100644 --- a/binutils/srconv.c +++ b/binutils/srconv.c @@ -1204,6 +1204,8 @@ walk_tree_sfile (struct coff_section *section, struct coff_sfile *sfile) static void wr_program_structure (struct coff_ofile *p, struct coff_sfile *sfile) { + if (p->nsections < 4) + return; walk_tree_sfile (p->sections + 4, sfile); } @@ -1705,6 +1707,9 @@ prescan (struct coff_ofile *otree) struct coff_symbol *s; struct coff_section *common_section; + if (otree->nsections < 3) + return; + /* Find the common section - always section 3. */ common_section = otree->sections + 3; @@ -1715,7 +1720,6 @@ prescan (struct coff_ofile *otree) if (s->visible->type == coff_vis_common) { struct coff_where *w = s->where; - /* s->visible->type = coff_vis_ext_def; leave it as common */ common_section->size = align (common_section->size); w->offset = common_section->size + common_section->address; |