From: Joel Brobecker <brobecker@gnat.com>
Date: Tue, 13 Mar 2012 22:27:12 +0000 (+0000)
Subject: Fix buffer overflow in aix-thread.c:fill_fprs
X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=e3ebf1bb4166d27e70d049033773740cbd05b5d1;p=binutils-gdb.git

Fix buffer overflow in aix-thread.c:fill_fprs

gdb/
2012-03-08  Chris January  <chris.january@allinea.com>

	* aix-thread.c (fill_sprs): Store the floating point registers
	at the correct offsets into vals.
---

diff --git a/gdb/ChangeLog b/gdb/ChangeLog
index c946296e67c..b5f0f3337a2 100644
--- a/gdb/ChangeLog
+++ b/gdb/ChangeLog
@@ -1,3 +1,8 @@
+2012-03-13  Chris January  <chris.january@allinea.com>
+
+	* aix-thread.c (fill_sprs): Store the floating point registers
+	at the correct offsets into vals.
+
 2012-03-13  Doug Evans  <dje@google.com>
 
 	* NEWS: Mention symbol-reloading has been deleted.
diff --git a/gdb/aix-thread.c b/gdb/aix-thread.c
index 3cdab4852cc..f9787e3ab7a 100644
--- a/gdb/aix-thread.c
+++ b/gdb/aix-thread.c
@@ -1356,7 +1356,8 @@ fill_fprs (const struct regcache *regcache, double *vals)
        regno < tdep->ppc_fp0_regnum + ppc_num_fprs;
        regno++)
     if (REG_VALID == regcache_register_status (regcache, regno))
-      regcache_raw_collect (regcache, regno, vals + regno);
+      regcache_raw_collect (regcache, regno,
+			    vals + regno - tdep->ppc_fp0_regnum);
 }
 
 /* Store the special registers into the specified 64-bit and 32-bit