[Bug binutils/19296] memory crush(Out of bound read error)caused by insufficient check for parsed_size in archive.c

[nickc at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=19296

Nick Clifton <nickc at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
                 CC|                            |nickc at redhat dot com
         Resolution|---                         |DUPLICATE

--- Comment #2 from Nick Clifton <nickc at redhat dot com> ---
Hi Guys,

  Thanks very much for reporting this problem.

> We find an memory crush bug of objdump and nm at least before
> binuitls-2.24,and 

  You are correct - this bug exists in 2.24 and earlier versions of the
binutils.  Fortunately however the bug has been fixed in the 2.25 release and
the forthcoming 2.26 release, so it is only a problem for legacy installations.

  At this point I think that it is up to distribution maintainers to decide if
and how they want to patch this bug - assuming of course that they are using
the 2.24 (or earlier) sources.

Cheers
  Nick

PS. This problem, and others like it, were reported in PR 17512.

*** This bug has been marked as a duplicate of bug 17512 ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.