Stop the assembler from running out of memory when asked to generate a huge number...

	PR gas/20901
	* read.c (s_space): Place an upper limit on the number of spaces
	generated.

diff --git a/gas/ChangeLog b/gas/ChangeLog
index bb6beb8e3c3f0281217a7bc84959c183295dd4fb..781e975920cd3322afb1eb7b67377dde59e28fbb 100644 (file)
--- a/gas/ChangeLog
+++ b/gas/ChangeLog
@@ -1,5 +1,9 @@
 2016-12-06  Nick Clifton  <nickc@redhat.com>
 
+       PR gas/20901
+       * read.c (s_space): Place an upper limit on the number of spaces
+       generated.
+
        PR gas/20896
        * testsuite/gas/mmix/err-byte1.s: Adjust expected warning messages
        to account for patch to next_char_of_string.

diff --git a/gas/read.c b/gas/read.c
index 0cc0d2062eece690e9f22108806f9ed576b7f12c..08b8846f1514159e67e4bd0052e541099fe8fbd5 100644 (file)
--- a/gas/read.c
+++ b/gas/read.c
@@ -3394,11 +3394,20 @@ s_space (int mult)
        {
          offsetT i;
 
-         if (mult == 0)
-           mult = 1;
-         bytes = mult * exp.X_add_number;
-         for (i = 0; i < exp.X_add_number; i++)
-           emit_expr (&val, mult);
+         /* PR 20901: Check for excessive values.
+            FIXME: 1<<10 is an arbitrary limit.  Maybe use maxpagesize instead ?  */
+         if (exp.X_add_number < 0 || exp.X_add_number > (1 << 10))
+           as_bad (_("size value for s_space directive too large: %lx"),
+                   (long) exp.X_add_number);
+         else
+           {
+             if (mult == 0)
+               mult = 1;
+             bytes = mult * exp.X_add_number;
+
+             for (i = 0; i < exp.X_add_number; i++)
+               emit_expr (&val, mult);
+           }
        }
     }
   else