[Bug binutils/17512] libbfd/binutils: crashes on fuzzed samples

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #212 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Nick Clifton <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=c8071705c69a13d237aeca4709bf91deaff7e5cb

commit c8071705c69a13d237aeca4709bf91deaff7e5cb
Author: Nick Clifton <address@hidden>
Date:   Thu Feb 26 14:21:54 2015 +0000

    Fix undefined arithmetic operations detected by -fsanitize=undefined when
running readelf on fuzzed binaries.

        PR binutils/17512
        * dwarf.c (display_debug_loc): Pacify the undefined behaviour
        sanitizer by simplifying address difference calculation.
        (struct Frame_Chunk): Change type of cfa_offset to dwarf_vma in
        order to avoid arithmetic overflows.
        (frame_display_row): Cast cfa_offset before printing it.
        (display_debug_frames): Likewise.
        Check for an unexpected segment size.
        Chnage type of 'l' local to dwarf_vma and cast it back to an int
        when printing.
        (process_cu_tu_index): Tighten check for an invalid ncols value.
        * readelf.c (process_corefile_note_segment): Check for
        inote.descdata extending beyond the end of the section.
        (process_v850_notes): Likewise.

-- 
You are receiving this mail because:
You are on the CC list for the bug.