coff_get_normalized_symtab bfd_release
authorAlan Modra <amodra@gmail.com>
Tue, 21 Mar 2023 23:43:46 +0000 (10:13 +1030)
committerAlan Modra <amodra@gmail.com>
Wed, 22 Mar 2023 00:09:18 +0000 (10:39 +1030)
We can't free "internal" on errors, since bfd_coff_swap_sym_in may
call bfd_alloc.  For example, _bfd_XXi_swap_sym_in may even create new
sections, which use bfd_alloc'd memory.  If "internal" is freed, all
more recently bfd_alloc'd memory is also freed.

* coffgen.c (coff_get_normalized_symtab): Don't bfd_release on
error.

bfd/coffgen.c

index 774edf76f24701225f890cad0aceb0538f334236..0b764b0c45f61aeb2048ffe9c5de6c1601bafbd1 100644 (file)
@@ -1753,10 +1753,7 @@ coff_get_normalized_symtab (bfd *abfd)
 
       /* PR 17512: Prevent buffer overrun.  */
       if (symbol_ptr->u.syment.n_numaux > ((raw_end - 1) - raw_src) / symesz)
-       {
-         bfd_release (abfd, internal);
-         return NULL;
-       }
+       return NULL;
 
       for (i = 0;
           i < symbol_ptr->u.syment.n_numaux;