[Bug binutils/17531] readelf crashes on fuzzed samples

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #99 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Alan Modra <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6bd6a03d6975a96802b37741a99644570e52a72b

commit 6bd6a03d6975a96802b37741a99644570e52a72b
Author: Alan Modra <address@hidden>
Date:   Wed Sep 27 15:14:00 2017 +0930

    PR22216, infinite loop in readelf process_symbol_table

    This should make readelf bombproof given a fuzzed DT_HASH.  Also
    removes a bogus check that would have resulted in wrong histograms.

        PR 22216
        * readelf.c (process_symbol_table): Check that DT_HASH symbol
        chains are only visited once, and report an error if not.  Display
        invalid symbol index if chain is out of range.  Use the same logic
        when calculating histograms rather than the PR 17531 fix.  Delete
        bogus check that chained index is less than number of buckets.

-- 
You are receiving this mail because:
You are on the CC list for the bug.