From 533d0af0b8a8127b6f189222fc57aa11ce7aab2c Mon Sep 17 00:00:00 2001 From: "H.J. Lu" Date: Mon, 5 Jan 2015 17:43:34 -0800 Subject: [PATCH] Return NULL on corrupt input PR binutils/17512 * elf32-i386.c (elf_i386_get_plt_sym_val): Return NULL on corrupt input. * elf64-x86-64.c (elf_x86_64_get_plt_sym_val): Likewise. --- bfd/ChangeLog | 7 +++++++ bfd/elf32-i386.c | 9 ++++++--- bfd/elf64-x86-64.c | 3 +++ 3 files changed, 16 insertions(+), 3 deletions(-) diff --git a/bfd/ChangeLog b/bfd/ChangeLog index 0545a7ef0b9..5215aa73cf4 100644 --- a/bfd/ChangeLog +++ b/bfd/ChangeLog @@ -1,3 +1,10 @@ +2015-01-05 H.J. Lu + + PR binutils/17512 + * elf32-i386.c (elf_i386_get_plt_sym_val): Return NULL on corrupt + input. + * elf64-x86-64.c (elf_x86_64_get_plt_sym_val): Likewise. + 2015-01-05 Nick Clifton PR binutils/17512 diff --git a/bfd/elf32-i386.c b/bfd/elf32-i386.c index 85acf0fce6d..cf072a31207 100644 --- a/bfd/elf32-i386.c +++ b/bfd/elf32-i386.c @@ -5194,9 +5194,12 @@ bad_return: { long reloc_index; - if (p->howto == NULL /* PR 17512: file: bc9d6cf5. */ - || (p->howto->type != R_386_JUMP_SLOT - && p->howto->type != R_386_IRELATIVE)) + /* PR 17512: file: bc9d6cf5. */ + if (p->howto == NULL) + goto bad_return; + + if (p->howto->type != R_386_JUMP_SLOT + && p->howto->type != R_386_IRELATIVE) continue; reloc_index = H_GET_32 (abfd, (plt_contents + plt_offset diff --git a/bfd/elf64-x86-64.c b/bfd/elf64-x86-64.c index cf63d6ac3a5..5cbb6fd9ba2 100644 --- a/bfd/elf64-x86-64.c +++ b/bfd/elf64-x86-64.c @@ -5559,6 +5559,9 @@ bad_return: { long reloc_index; + if (p->howto == NULL) + goto bad_return; + if (p->howto->type != R_X86_64_JUMP_SLOT && p->howto->type != R_X86_64_IRELATIVE) continue; -- 2.30.2