[Bug binutils/24043] Heap-buffer-overflow problem in function d_expression_1 in cp-demangle.c, as demonstrated by c++filt

https://sourceware.org/bugzilla/show_bug.cgi?id=24043 --- Comment #5 from wcventure --- This issue is moved to https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 -- You are receiving this mail because: You are on the CC list for the bug. ___

[Bug binutils/24043] Heap-buffer-overflow problem in function d_expression_1 in cp-demangle.c, as demonstrated by c++filt

https://sourceware.org/bugzilla/show_bug.cgi?id=24043 Nick Clifton changed: What|Removed |Added Status|UNCONFIRMED |RESOLVED CC|

[Bug binutils/24043] Heap-buffer-overflow problem in function d_expression_1 in cp-demangle.c, as demonstrated by c++filt

https://sourceware.org/bugzilla/show_bug.cgi?id=24043 --- Comment #3 from wcventure --- That 's because "d_advance (di, 2);" in function d_expression_1, it change di->n = di + 2; leading to buffer-over-flow problem. > 3353 d_advance (di, 2); > 3354 if (peek == 't') > 3355 type =

[Bug binutils/24043] Heap-buffer-overflow problem in function d_expression_1 in cp-demangle.c, as demonstrated by c++filt

https://sourceware.org/bugzilla/show_bug.cgi?id=24043 --- Comment #2 from wcventure --- Created attachment 11501 --> https://sourceware.org/bugzilla/attachment.cgi?id=11501=edit POC3 -- You are receiving this mail because: You are on the CC list for the bug.

[Bug binutils/24043] Heap-buffer-overflow problem in function d_expression_1 in cp-demangle.c, as demonstrated by c++filt

https://sourceware.org/bugzilla/show_bug.cgi?id=24043 --- Comment #1 from wcventure --- Created attachment 11500 --> https://sourceware.org/bugzilla/attachment.cgi?id=11500=edit POC2 -- You are receiving this mail because: You are on the CC list for the bug.