bug-binutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug binutils/2584] SIGSEGV in strings tool when the file is crafted.


From: kkojima at rr dot iij4u dot or dot jp
Subject: [Bug binutils/2584] SIGSEGV in strings tool when the file is crafted.
Date: 23 Apr 2006 23:44:02 -0000

------- Additional Comments From kkojima at rr dot iij4u dot or dot jp  
2006-04-23 23:44 -------
Created an attachment (id=978)
 --> (http://sourceware.org/bugzilla/attachment.cgi?id=978&action=view)
a patch

I can reproduce this on CVS too.
bfd/tekhex.c:getsym() doesn't check if the length character is
a valid hexadecimal character.  hex_value() returns 99 for non
hexadecimal characters and getsym uses it as the length to be read.
Then it causes a buffer overrun because getsym is called with only
17 bytes buffer.  The patch attached seems to fix the given test
case anyway, though it'd be better to add more checks.


-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=2584

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.




reply via email to

[Prev in Thread] Current Thread [Next in Thread]