https://sourceware.org/bugzilla/show_bug.cgi?id=17510
--- Comment #2 from Michal Zalewski <lcamtuf at coredump dot cx> --- Created attachment 7848 --> https://sourceware.org/bugzilla/attachment.cgi?id=7848&action=edit Test case #2 Note that range checking problems are somewhat endemic across the function; here's a test case that crashes in a different location but due to the same --n_elt / ++idx pattern. This one looks like it leads to writes to arbitrary pointers. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils
