https://sourceware.org/bugzilla/show_bug.cgi?id=34401

Mark Wielaard <mark at klomp dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mark at klomp dot org
         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Mark Wielaard <mark at klomp dot org> ---
Thanks for the report, analysis, reproducer and proposed fix.

Pushed as:

commit 681b793e420c3b1d45b921c190edfb2adfc45b97
Author: Mark Wielaard <[email protected]>
Date:   Thu Jul 16 16:45:18 2026 +0200

    libelf: Handle truncated symbol archive index

    When checking the index_size of an / or /SYM64/ symbol archive index
    in elf_getarsym we only checked that the index_size contained the
    whole offset table, but failed to check there was also room for the
    count. Fix this by first making sure to check the index_size is large
    enough for the count (4 or 8 bytes), then check that the rest of the
    index_size has room for count table offset entries.

    https://sourceware.org/bugzilla/show_bug.cgi?id=34401

    Reported-by: Karan Kurani <[email protected]>
    Signed-off-by: Mark Wielaard <[email protected]>

P.S. When running against a clean elfutils git checkout as in your script you
should use --enable-maintainer-mode to generate some extra files.

Although the patch looks technically correct GNU patch didn't like it with only
minimal context.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to