[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-04-12 Thread thuanpv at comp dot nus.edu.sg
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #8 from Thuan Pham  ---
This is CVE-2017-6965

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #7 from Nick Clifton  ---
*** Bug 21136 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #6 from Nick Clifton  ---
*** Bug 21146 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #5 from Nick Clifton  ---
*** Bug 21140 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #4 from Nick Clifton  ---
*** Bug 21141 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

Nick Clifton  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 CC||nickc at redhat dot com
 Resolution|--- |FIXED

--- Comment #3 from Nick Clifton  ---
Hi Thuan,

  Thanks for reporting this bug.  I have applied a patch to fix the problem.

  The issue was the code in readelf that processes target specific relocations
  was not checking for possible buffer overflow.  So I have added these checks.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #1 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by Nick Clifton :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=03f7786e2f440b9892b1c34a58fb26222ce1b493

commit 03f7786e2f440b9892b1c34a58fb26222ce1b493
Author: Nick Clifton 
Date:   Mon Feb 13 13:08:32 2017 +

Fix readelf writing to illegal addresses whilst processing corrupt input
files containing symbol-difference relocations.

PR binutils/21137
* readelf.c (target_specific_reloc_handling): Add end parameter.
Check for buffer overflow before writing relocated values.
(apply_relocations): Pass end to target_specific_reloc_handling.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21137] readelf - heap buffer overflow in elfcomm

2017-02-13 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21137

--- Comment #2 from Nick Clifton  ---
*** Bug 21138 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils