[Bug binutils/18420] Segfault in readelf with --unwind option

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=18420

--- Comment #1 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Nick Clifton <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b4477bc81824800248d44f141aeaf63e00314a01

commit b4477bc81824800248d44f141aeaf63e00314a01
Author: Nick Clifton <address@hidden>
Date:   Mon May 18 15:58:46 2015 +0100

    Fix seg-fault in readelf when decoding corrupt IA64 unwind information.

        PR binutils/18420
        * ia64-unwind.c (unw_decode): Add end parameter.  Pass parameter
        on to decode functions.
        (unw_devode_p2_p5): Pass end paraemter to UNW_DEC_SPILL_MASK.
        (UNW_DEC_SPILL_MASK): Add end parameter.  Check that unw_rlen does
        not take us beyond the end of the buffer.
        * ia64-unwind.h (unw_decode): Update prototype.
        * readelf.c (dump_ia64_unwind): Pass end pointer to unw_decode.

-- 
You are receiving this mail because:
You are on the CC list for the bug.