public inbox for gdb-testers@sourceware.org
help / color / mirror / Atom feed
* [binutils-gdb] PR22307, Heap out of bounds read in _bfd_elf_parse_gnu_properties
@ 2017-10-17 14:54 sergiodj+buildbot
  2017-10-17 14:54 ` *** COMPILATION FAILED *** Failures on Fedora-s390x-m64, branch master *** BREAKAGE *** sergiodj+buildbot
                   ` (10 more replies)
  0 siblings, 11 replies; 12+ messages in thread
From: sergiodj+buildbot @ 2017-10-17 14:54 UTC (permalink / raw)
  To: gdb-testers

*** TEST RESULTS FOR COMMIT cf54ebff3b7361989712fd9c0128a9b255578163 ***

Author: Alan Modra <amodra@gmail.com>
Branch: master
Commit: cf54ebff3b7361989712fd9c0128a9b255578163

PR22307, Heap out of bounds read in _bfd_elf_parse_gnu_properties

When adding an unbounded increment to a pointer, you can't just check
against the end of the buffer but also must check that overflow
doesn't result in "negative" pointer movement.  Pointer comparisons
are signed.  Better, check the increment against the space left using
an unsigned comparison.

	PR 22307
	* elf-properties.c (_bfd_elf_parse_gnu_properties): Compare datasz
	against size left rather than comparing pointers.  Reorganise loop.


^ permalink raw reply	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2017-10-19 18:41 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2017-10-17 14:54 [binutils-gdb] PR22307, Heap out of bounds read in _bfd_elf_parse_gnu_properties sergiodj+buildbot
2017-10-17 14:54 ` *** COMPILATION FAILED *** Failures on Fedora-s390x-m64, branch master *** BREAKAGE *** sergiodj+buildbot
2017-10-17 19:35 ` Failures on Ubuntu-AArch64-m64, branch master sergiodj+buildbot
2017-10-17 19:48 ` Failures on Ubuntu-AArch32-native-extended-gdbserver-m32, " sergiodj+buildbot
2017-10-19 18:18 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-m64, branch master *** BREAKAGE *** sergiodj+buildbot
2017-10-19 18:20 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-native-gdbserver-m32, " sergiodj+buildbot
2017-10-19 18:26 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-native-gdbserver-m64, " sergiodj+buildbot
2017-10-19 18:30 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-native-extended-gdbserver-m64, " sergiodj+buildbot
2017-10-19 18:32 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-cc-with-index, " sergiodj+buildbot
2017-10-19 18:35 ` *** COMPILATION FAILED *** Failures on Fedora-i686, " sergiodj+buildbot
2017-10-19 18:38 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-m32, " sergiodj+buildbot
2017-10-19 18:41 ` *** COMPILATION FAILED *** Failures on Fedora-x86_64-native-extended-gdbserver-m32, " sergiodj+buildbot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).