projects / binutils-gdb.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 24a1504) | patch
Limit bogus archive parsed_size
authorAlan Modra <amodra@gmail.com>
Tue, 25 Feb 2020 02:18:43 +0000 (12:48 +1030)
committerAlan Modra <amodra@gmail.com>
Wed, 26 Feb 2020 00:07:13 +0000 (10:37 +1030)
commitb570b954bc5c1d6a6edb363c7bdba814bc1fd174
treea7afa03ea8b4b9383264005d4f29413931a7468dtree
parent24a15046c0ccc7fb7b95da1bb72fa66ad6bf6382commit | diff
Limit bogus archive parsed_size

Archive element size is given by data in the archive, and thus is
subject to attack by fuzzers.  The only harm this allows is allocation
of huge amounts of memory, but some systems don't handle that well.
So limit archive element size to archive file size.

* bfdio.c (bfd_get_file_size): Ignore bogus archive element sizes.
bfd/ChangeLog diff | blob | history
bfd/bfdio.c diff | blob | history