[Bug binutils/17512] segfault in PE parser / _bfd_pei_swap_aouthdr_in

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #41 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "gdb and binutils".

The branch, master has been updated
       via  f54498b45795194df671207c6ef3d6cd6d0c0ebb (commit)
      from  fe06005387223e8a8b37e49036efe06b4062c7f4 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f54498b45795194df671207c6ef3d6cd6d0c0ebb

commit f54498b45795194df671207c6ef3d6cd6d0c0ebb
Author: Nick Clifton <address@hidden>
Date:   Fri Oct 31 16:36:31 2014 +0000

    Avoid allocating over-large buffers when parsing corrupt binaries.

        PR binutils/17512
        * coffgen.c (_bfd_coff_get_external_symbols): Do not try to load a
        symbol table bigger than the file.
        * elf.c (bfd_elf_get_str_section): Do not try to load a string
        table bigger than the file.

        * readelf.c (process_program_headers): Avoid memory exhaustion due
        to corrupt values in a dynamis segment header.
        (get_32bit_elf_symbols): Do not attempt to read an over-large
        section.
        (get_64bit_elf_symbols): Likewise.

-----------------------------------------------------------------------

Summary of changes:
 bfd/ChangeLog      |    8 ++++++++
 bfd/coffgen.c      |    5 +++++
 bfd/elf.c          |    5 +++++
 binutils/ChangeLog |    9 +++++++++
 binutils/readelf.c |   32 ++++++++++++++++++++++++++++----
 5 files changed, 55 insertions(+), 4 deletions(-)

-- 
You are receiving this mail because:
You are on the CC list for the bug.