https://sourceware.org/bugzilla/show_bug.cgi?id=17510
--- Comment #9 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> --- This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "gdb and binutils". The branch, master has been updated via 708d7d0d11f0f2d776171979aa3479e8e12a38a0 (commit) from 6fb9c0f83252a79b2f1a3f8e75fa117ca7a4d589 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=708d7d0d11f0f2d776171979aa3479e8e12a38a0 commit 708d7d0d11f0f2d776171979aa3479e8e12a38a0 Author: Nick Clifton <ni...@redhat.com> Date: Tue Oct 28 10:48:14 2014 +0000 This patch fixes a flaw in the SREC parser which could cause a stack overflow and potential secuiryt breach. PR binutils/17510 * srec.c (srec_bad_byte): Increase size of buf to allow for negative values. (srec_scan): Use an unsigned char buffer to hold header bytes. ----------------------------------------------------------------------- Summary of changes: bfd/ChangeLog | 8 ++++++++ bfd/elf.c | 2 +- bfd/peXXigen.c | 1 - bfd/srec.c | 4 ++-- 4 files changed, 11 insertions(+), 4 deletions(-) -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils