[Bug ld/24042] Global-buffer-overflow problem in function output_rel_find in eelf_x86_64.c, as demonstrated by "ld -E"

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=24042

--- Comment #2 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Alan Modra <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8fd04a4255376036e85c4e80d430b44ec4b06c64

commit 8fd04a4255376036e85c4e80d430b44ec4b06c64
Author: Alan Modra <address@hidden>
Date:   Mon Dec 31 17:06:25 2018 +1030

    PR24042, Global-buffer-overflow problem in output_rel_find

    place_orphan handled ELF SHT_REL/SHT_RELA specially, output_rel_find
    didn't.  This mismatch was a bug and also meant it was possible to
    craft an object where ld accessed section->name out of bounds.

        PR 24042
        * emultempl/elf32.em (output_rel_find): Drop "sec" param.  Add
        "rela".
        (gld${EMULATION_NAME}_place_orphan): Use sh_type to calculate
        "rela" param of output_rel_find when ELF.  Tidy uses of elfinput.

-- 
You are receiving this mail because:
You are on the CC list for the bug.