diff options
| author | Alan Modra <amodra@gmail.com> | 2018-12-31 17:06:25 +1030 |
|---|---|---|
| committer | Alan Modra <amodra@gmail.com> | 2018-12-31 17:56:32 +1030 |
| commit | 8fd04a4255376036e85c4e80d430b44ec4b06c64 (patch) | |
| tree | 103df2c3136c544b5c65f742573aecab0124c6b2 /config | |
| parent | 54025d5812ff100f5f0654eb7e1ffd50f2e37f5f (diff) | |
| download | gdb-8fd04a4255376036e85c4e80d430b44ec4b06c64.zip gdb-8fd04a4255376036e85c4e80d430b44ec4b06c64.tar.gz gdb-8fd04a4255376036e85c4e80d430b44ec4b06c64.tar.bz2 | |
PR24042, Global-buffer-overflow problem in output_rel_find
place_orphan handled ELF SHT_REL/SHT_RELA specially, output_rel_find
didn't. This mismatch was a bug and also meant it was possible to
craft an object where ld accessed section->name out of bounds.
PR 24042
* emultempl/elf32.em (output_rel_find): Drop "sec" param. Add
"rela".
(gld${EMULATION_NAME}_place_orphan): Use sh_type to calculate
"rela" param of output_rel_find when ELF. Tidy uses of elfinput.
Diffstat (limited to 'config')
0 files changed, 0 insertions, 0 deletions