public inbox for gdb-prs@sourceware.org
help / color / mirror / Atom feed
* [Bug gdb/15509] New: GDB does not sane check the pathname for a Fopen request from the remote target
@ 2013-05-21 15:22 luis_gustavo at mentor dot com
  0 siblings, 0 replies; only message in thread
From: luis_gustavo at mentor dot com @ 2013-05-21 15:22 UTC (permalink / raw)
  To: gdb-prs

http://sourceware.org/bugzilla/show_bug.cgi?id=15509

             Bug #: 15509
           Summary: GDB does not sane check the pathname for a Fopen
                    request from the remote target
           Product: gdb
           Version: HEAD
            Status: NEW
          Severity: normal
          Priority: P2
         Component: gdb
        AssignedTo: unassigned@sourceware.org
        ReportedBy: luis_gustavo@mentor.com
    Classification: Unclassified


At the present moment, GDB does not do a sanity check on the size of the string
the denotes the pathname to be opened via a remote Fopen packet.

This can lead GDB to allocate a great amount of memory (via alloca) and
potentially crash.

The function responsible for this is remote-fileio.c:remote_fileio_func_open ()

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


^ permalink raw reply	[flat|nested] only message in thread
only message in thread, other threads:[~2013-05-21 15:22 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-05-21 15:22 [Bug gdb/15509] New: GDB does not sane check the pathname for a Fopen request from the remote target luis_gustavo at mentor dot com

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).