Commit-ID:  492746546fe380da768c8496213e26aa91b9b3aa
Gitweb:     http://git.kernel.org/tip/492746546fe380da768c8496213e26aa91b9b3aa
Author:     Cody P Schafer <c...@linux.vnet.ibm.com>
AuthorDate: Fri, 10 Aug 2012 15:22:55 -0700
Committer:  Arnaldo Carvalho de Melo <a...@redhat.com>
CommitDate: Mon, 13 Aug 2012 14:25:23 -0300

perf symbols: Avoid segfault in elf_strptr

If we call elf_section_by_name() with a truncated elf image (ie: the
file header indicates that the section headers are placed past the end
of the file), elf_strptr() causes a segfault within libelf.

Avoid this by checking that we can access the section string table
properly.

Should really be fixed in libelf/elfutils.

Signed-off-by: Cody P Schafer <c...@linux.vnet.ibm.com>
Cc: David Hansen <d...@linux.vnet.ibm.com>
Cc: Ingo Molnar <mi...@redhat.com>
Cc: Matt Hellsley <matth...@us.ibm.com>
Cc: Namhyung Kim <namhy...@kernel.org>
Cc: Paul Mackerras <pau...@samba.org>
Cc: Peter Zijlstra <a.p.zijls...@chello.nl>
Cc: Sukadev Bhattiprolu <suka...@linux.vnet.ibm.com>
Link: 
http://lkml.kernel.org/r/1344637382-22789-10-git-send-email-c...@linux.vnet.ibm.com
Signed-off-by: Arnaldo Carvalho de Melo <a...@redhat.com>
---
 tools/perf/util/symbol-elf.c |    4 ++++
 1 files changed, 4 insertions(+), 0 deletions(-)

diff --git a/tools/perf/util/symbol-elf.c b/tools/perf/util/symbol-elf.c
index a2e994e..a9a194d 100644
--- a/tools/perf/util/symbol-elf.c
+++ b/tools/perf/util/symbol-elf.c
@@ -129,6 +129,10 @@ static Elf_Scn *elf_section_by_name(Elf *elf, GElf_Ehdr 
*ep,
        Elf_Scn *sec = NULL;
        size_t cnt = 1;
 
+       /* Elf is corrupted/truncated, avoid calling elf_strptr. */
+       if (!elf_rawdata(elf_getscn(elf, ep->e_shstrndx), NULL))
+               return NULL;
+
        while ((sec = elf_nextscn(elf, sec)) != NULL) {
                char *str;
 
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Reply via email to