public inbox for gdb-prs@sourceware.org
help / color / mirror / Atom feed
* [Bug gdb/14289] New: bfd_pef_xlib_read_header overwrites stack memory
@ 2012-06-24 23:19 johnw at boostpro dot com
  0 siblings, 0 replies; only message in thread
From: johnw at boostpro dot com @ 2012-06-24 23:19 UTC (permalink / raw)
  To: gdb-prs

http://sourceware.org/bugzilla/show_bug.cgi?id=14289

             Bug #: 14289
           Summary: bfd_pef_xlib_read_header overwrites stack memory
           Product: gdb
           Version: 7.4
            Status: NEW
          Severity: normal
          Priority: P2
         Component: gdb
        AssignedTo: unassigned@sourceware.org
        ReportedBy: johnw@boostpro.com
    Classification: Unclassified


In pef.c, there is this declaration:

    unsigned char buf[76];

But later in the same function, this call:

    header->old_implementation_version = bfd_getb32 (buf + 76);

This overwrites stack from &buf[76] to &buf[80].

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] only message in thread
only message in thread, other threads:[~2012-06-24 23:19 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-06-24 23:19 [Bug gdb/14289] New: bfd_pef_xlib_read_header overwrites stack memory johnw at boostpro dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).