mirror/binutils-gdb
2
0
Fork 0
mirror of https://sourceware.org/git/binutils-gdb.git synced 2025-03-13 13:49:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix a potential illegal memory access when parsing corrupt DWARF information.

Browse Source 
PR 29908
	* dwarf.c (display_debug_addr): Check for corrupt header lengths.
This commit is contained in:
Nick Clifton 2022-12-16 12:06:43 +00:00
parent 429f0cd139
commit fa501b6930
2 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
binutils/ChangeLog
View File

@ -1,3 +1,8 @@
2022-12-16 Nick Clifton <nickc@redhat.com>
PR 29908
* dwarf.c (display_debug_addr): Check for corrupt header lengths.
2022-12-01 Nick Clifton <nickc@redhat.com>
PR 25202

21
binutils/dwarf.c
View File

@ -7738,6 +7738,12 @@ display_debug_addr (struct dwarf_section *section,
return 0;
}
end = curr_header + length;
if (end < entry)
{
warn (_("Corrupt %s section header: length field (%lx) is too small\n"),
section->name, length);
return 0;
}
SAFE_BYTE_GET_AND_INC (version, curr_header, 2, entry);
if (version != 5)
warn (_("Corrupt %s section: expecting version number 5 in header but found %d instead\n"),
@ -7748,9 +7754,22 @@ display_debug_addr (struct dwarf_section *section,
address_size += segment_selector_size;
}
else
end = section->start + debug_addr_info [i + 1]->addr_base;
{
end = section->start + debug_addr_info [i + 1]->addr_base;
if (end < entry)
{
warn (_("Corrupt %s section: address base of entry %u (%lx) is less than entry %u (%lx)\n"),
section->name,
i, debug_addr_info [i]->addr_base,
i + 1, debug_addr_info [i + 1]->addr_base);
return 0;
}
}
header = end;
idx = 0;
while ((size_t) (end - entry) >= address_size)
{
uint64_t base = byte_get (entry, address_size);