[Bug binutils/21589] heap-buffer-overflow in bfd_getl64

2017-06-14 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21589

Nick Clifton  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 CC||nickc at redhat dot com
 Resolution|--- |FIXED

--- Comment #5 from Nick Clifton  ---
Hi Aadamski,

  Thanks for reporting this bug.  There were several places in the VMS parsing
code where potential address violations could happen.  I have checked in a
patch which I hope will address them all.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21589] heap-buffer-overflow in bfd_getl64

2017-06-14 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=21589

--- Comment #4 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by Nick Clifton :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=c53d2e6d744da000aaafe0237bced090aab62818

commit c53d2e6d744da000aaafe0237bced090aab62818
Author: Nick Clifton 
Date:   Wed Jun 14 11:27:15 2017 +0100

Fix potential address violations when processing a corrupt Alpha VMA
binary.

PR binutils/21589
* vms-alpha.c (_bfd_vms_get_value): Add an extra parameter - the
maximum value for the ascic pointer.  Check that name processing
does not read beyond this value.
(_bfd_vms_slurp_etir): Add checks for attempts to read beyond the
end of etir record.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21589] heap-buffer-overflow in bfd_getl64

2017-06-13 Thread aadamski at quarkslab dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21589

--- Comment #3 from aadamski at quarkslab dot com ---
Additional Information:
The command used was `objdump -D `. The compilation flags used were `-g
-O2 -fno-omit-frame-pointer -fsanitize=address
-fno-sanitize-recover=undefined`. The configuration settings used were
`--enable-targets=all --disable-shared`.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21589] heap-buffer-overflow in bfd_getl64

2017-06-13 Thread aadamski at quarkslab dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21589

--- Comment #2 from aadamski at quarkslab dot com ---
Created attachment 10125
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10125&action=edit
report

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21589] heap-buffer-overflow in bfd_getl64

2017-06-13 Thread aadamski at quarkslab dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21589

--- Comment #1 from aadamski at quarkslab dot com ---
Created attachment 10124
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10124&action=edit
testcase

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils