From: "mark at klomp dot org" <sourceware-bugzilla@sourceware.org>
To: elfutils-devel@sourceware.org
Subject: [Bug tools/21311] eu-elflint: heap-based buffer overflow in check_sysv_hash (elflint.c)
Date: Mon, 03 Apr 2017 22:23:00 -0000 [thread overview]
Message-ID: <bug-21311-10460-XEzLUBLEHK@http.sourceware.org/bugzilla/> (raw)
In-Reply-To: <bug-21311-10460@http.sourceware.org/bugzilla/>
https://sourceware.org/bugzilla/show_bug.cgi?id=21311
--- Comment #2 from Mark Wielaard <mark at klomp dot org> ---
commit 61fe61898747f63eb35a81c2261f3590a3dab8fd
Author: Mark Wielaard <mark@klomp.org>
Date: Tue Mar 28 00:38:52 2017 +0200
elflint: Don't trust sh_entsize when checking hash sections.
Calculate and use the expected entsize instead of relying on the one
given by the ELF file section header. Return early if there isn't enough
data in the section to check the full hash table.
https://sourceware.org/bugzilla/show_bug.cgi?id=21311
Signed-off-by: Mark Wielaard <mark@klomp.org>
--
You are receiving this mail because:
You are on the CC list for the bug.
next prev parent reply other threads:[~2017-04-03 22:23 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-03-27 10:40 [Bug tools/21311] New: " ago at gentoo dot org
2017-03-27 22:39 ` [Bug tools/21311] " mark at klomp dot org
2017-04-03 22:23 ` mark at klomp dot org [this message]
2017-04-03 22:31 ` mark at klomp dot org
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=bug-21311-10460-XEzLUBLEHK@http.sourceware.org/bugzilla/ \
--to=sourceware-bugzilla@sourceware.org \
--cc=elfutils-devel@sourceware.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).