bfd dwarf2 sanity checking
authorAlan Modra <amodra@gmail.com>
Fri, 21 May 2021 13:04:34 +0000 (22:34 +0930)
committerAlan Modra <amodra@gmail.com>
Sat, 22 May 2021 07:53:24 +0000 (17:23 +0930)
commit574ec1084d28ee56710ea48eb072e5c47226d247
tree896e94db8291202128699acf9feec022f8a25db7
parent1f1fb219fdc4f96fd967e6173e9090c4c4917e96
bfd dwarf2 sanity checking

This patch is aimed at the many places in dwarf2.c that blindly
increment a data pointer after calling functions that are meant to
read a fixed number of bytes.  The problem with that is with damaged
dwarf we might increment a data pointer past the end of data, which is
UB and complicates (ie. bugs likely) any further use of that data
pointer.  To fix those problems, I've moved incrementing of the data
pointer into the functions that do the reads.  _bfd_safe_read_leb128
gets the same treatment for consistency.

* libbfd.c (_bfd_safe_read_leb128): Remove length_return parameter.
Replace data pointer with pointer to pointer.  Increment pointer
over bytes read.
* libbfd-in.h (_bfd_safe_read_leb128): Update prototype.
* elf-attrs.c (_bfd_elf_parse_attributes): Adjust to suit.  Be
careful not to increment data pointer past end.  Remove now
redundant pr17512 check.
* wasm-module.c (READ_LEB128): Adjust to suit changes to
_bfd_safe_read_leb128.
* dwarf2.c (read_n_bytes): New inline function, old one renamed to..
(read_blk): ..this.  Allocate and return block.  Increment bfd_byte**
arg.
(read_3_bytes): New function.
(read_1_byte, read_1_signed_byte, read_2_bytes, read_4_bytes),
(read_8_bytes, read_string, read_indirect_string),
(read_indirect_line_string, read_alt_indirect_string): Take a
byte_byte** arg which is incremented over bytes read.  Remove any
bytes_read return.  Rewrite limit checks to compare lengths
rather than pointers.
(read_abbrevs, read_attribute_value, read_formatted_entries),
(decode_line_info, find_abstract_instance, read_ranges),
(read_rnglists, scan_unit_for_symbols, parse_comp_unit),
(stash_comp_unit): Adjust to suit.  Rewrite limit checks to
compare lengths rather than pointers.
* libbfd.h: Regenerate.
bfd/ChangeLog
bfd/dwarf2.c
bfd/elf-attrs.c
bfd/libbfd-in.h
bfd/libbfd.c
bfd/libbfd.h
bfd/wasm-module.c