[Bug binutils/21139] readelf crashes - corrupted double-linked list because of use after free

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=21139

--- Comment #1 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot 
gnu.org> ---
The master branch has been updated by Nick Clifton <address@hidden>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f84ce13b6708801ca1d6289b7c4003e2f5a6d7f9

commit f84ce13b6708801ca1d6289b7c4003e2f5a6d7f9
Author: Nick Clifton <address@hidden>
Date:   Mon Feb 13 14:03:22 2017 +0000

    Fix read-after-free error in readelf when processing multiple, relocated
sections in an MSP430 binary.

        PR binutils/21139
        * readelf.c (target_specific_reloc_handling): Add num_syms
        parameter.  Check for symbol table overflow before accessing
        symbol value.  If reloc pointer is NULL, discard all saved state.
        (apply_relocations): Pass num_syms to target_specific_reloc_handling.
        Call target_specific_reloc_handling with a NULL reloc pointer
        after processing all of the relocs.

-- 
You are receiving this mail because:
You are on the CC list for the bug.