diff options
| author | Andreas Arnez <arnez@linux.vnet.ibm.com> | 2015-01-14 12:01:38 +0000 |
|---|---|---|
| committer | Ulrich Weigand <ulrich.weigand@de.ibm.com> | 2015-02-04 14:14:31 +0100 |
| commit | 1528345d6c4a407e0b36b3474eb458cbd04146f7 (patch) | |
| tree | e1fab52ee8539ddbec833fdd9256d67cbb468b92 /gdb/mn10300-linux-tdep.c | |
| parent | 8962a307ae3dd59166a4a6dc4e60a4da880686cd (diff) | |
| download | gdb-1528345d6c4a407e0b36b3474eb458cbd04146f7.zip gdb-1528345d6c4a407e0b36b3474eb458cbd04146f7.tar.gz gdb-1528345d6c4a407e0b36b3474eb458cbd04146f7.tar.bz2 | |
Fix internal error when core file section is too big
As reported in PR 17808, a test case with a forged (invalid) core file
can crash GDB with an assertion failure. In that particular case the
prstatus of an i386 core file looks like that from an AMD64 core file.
Consequently the respective regset supply function i386_supply_gregset
is invoked with a larger buffer than usual. But i386_supply_gregset
asserts a specific buffer size, and this assertion fails.
The patch relaxes all buffer size assertions in regset supply
functions such that they merely check for a sufficiently large buffer.
For consistency the regset collect functions are adjusted as well.
gdb/ChangeLog:
PR corefiles/17808:
* gdbarch.sh (iterate_over_regset_sections_cb): Document this
function type, particularly its SIZE parameter.
* gdbarch.h: Regenerate.
* amd64-tdep.c (amd64_supply_fpregset): In gdb_assert, compare
actual against required size using ">=" instead of "==".
(amd64_collect_fpregset): Likewise.
* i386-tdep.c (i386_supply_gregset): Likewise.
(i386_collect_gregset): Likewise.
(i386_supply_fpregset): Likewise.
(i386_collect_fpregset): Likewise.
* mips-linux-tdep.c (mips_supply_gregset_wrapper): Likewise.
(mips_fill_gregset_wrapper): Likewise.
(mips_supply_fpregset_wrapper): Likewise.
(mips_fill_fpregset_wrapper): Likewise.
(mips64_supply_gregset_wrapper): Likewise.
(mips64_fill_gregset_wrapper): Likewise.
(mips64_supply_fpregset_wrapper): Likewise.
(mips64_fill_fpregset_wrapper): Likewise.
* mn10300-linux-tdep.c (am33_supply_gregset_method): Likewise.
(am33_supply_fpregset_method): Likewise.
(am33_collect_gregset_method): Likewise.
(am33_collect_fpregset_method): Likewise.
Diffstat (limited to 'gdb/mn10300-linux-tdep.c')
| -rw-r--r-- | gdb/mn10300-linux-tdep.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/gdb/mn10300-linux-tdep.c b/gdb/mn10300-linux-tdep.c index d92e93d..9ac6c15 100644 --- a/gdb/mn10300-linux-tdep.c +++ b/gdb/mn10300-linux-tdep.c @@ -90,7 +90,7 @@ am33_supply_gregset_method (const struct regset *regset, const mn10300_elf_greg_t *regp = (const mn10300_elf_greg_t *) gregs; int i; - gdb_assert (len == sizeof (mn10300_elf_gregset_t)); + gdb_assert (len >= sizeof (mn10300_elf_gregset_t)); switch (regnum) { case E_D0_REGNUM: @@ -245,7 +245,7 @@ am33_supply_fpregset_method (const struct regset *regset, { const mn10300_elf_fpregset_t *fpregset = fpregs; - gdb_assert (len == sizeof (mn10300_elf_fpregset_t)); + gdb_assert (len >= sizeof (mn10300_elf_fpregset_t)); if (regnum == -1) { @@ -278,7 +278,7 @@ am33_collect_gregset_method (const struct regset *regset, mn10300_elf_gregset_t *regp = gregs; int i; - gdb_assert (len == sizeof (mn10300_elf_gregset_t)); + gdb_assert (len >= sizeof (mn10300_elf_gregset_t)); switch (regnum) { case E_D0_REGNUM: @@ -425,7 +425,7 @@ am33_collect_fpregset_method (const struct regset *regset, { mn10300_elf_fpregset_t *fpregset = fpregs; - gdb_assert (len == sizeof (mn10300_elf_fpregset_t)); + gdb_assert (len >= sizeof (mn10300_elf_fpregset_t)); if (regnum == -1) { |