[Bug binutils/21665] Multiple heap based buffer overflow in the objdump tool of the GNU Binutils.

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=21665

--- Comment #11 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Alan Modra <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=bae7501e87ab614115d9d3213b4dd18d96e604db

commit bae7501e87ab614115d9d3213b4dd18d96e604db
Author: Alan Modra <address@hidden>
Date:   Sat Jul 1 21:58:10 2017 +0930

    Use bfd_malloc_and_get_section

    It's nicer than xmalloc followed by bfd_get_section_contents, since
    xmalloc exits on failure and needs a check that its size_t arg doesn't
    lose high bits when converted from bfd_size_type.

        PR binutils/21665
        * objdump.c (strtab): Make var a bfd_byte*.
        (disassemble_section): Don't limit malloc size.  Instead, use
        bfd_malloc_and_get_section.
        (read_section_stabs): Use bfd_malloc_and_get_section.  Return
        bfd_byte*.
        (find_stabs_section): Remove now unnecessary cast.
        * objcopy.c (copy_object): Use bfd_malloc_and_get_section.  Free
        contents on error return.
        * nlmconv.c (copy_sections): Use bfd_malloc_and_get_section.

-- 
You are receiving this mail because:
You are on the CC list for the bug.