https://sourceware.org/bugzilla/show_bug.cgi?id=17512
--- Comment #133 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> --- This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "gdb and binutils". The branch, master has been updated via 5860e3f883597cf6b8a937547015394edc1e8784 (commit) from e30880c2eeee3b43897161344bbbffd03f3a1c91 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=5860e3f883597cf6b8a937547015394edc1e8784 commit 5860e3f883597cf6b8a937547015394edc1e8784 Author: Nick Clifton <ni...@redhat.com> Date: Mon Dec 22 20:59:00 2014 +0000 More fixes for memory access violations exposed by fuzzed binaries. PR binutils/17512 * archive.c (do_slurp_bsd_armap): Return if the parsed_size is zero. (bfd_slurp_armap): Zero terminate the name. (bfd_generic_stat_arch_elt): If there is no header, fail. * elf32-arc.c (arc_info_to_howto_rel): Replace BFD_ASSERT with error message. * elf32-avr.c (avr_info_to_howto_rela): Likewise. * elf32-cr16c.c (elf_cr16c_info_to_howto_rel): Likewise. * elf32-cris.c (cris_info_to_howto_rela): Likewise. * elf32-d10v.c (d10v_info_to_howto_rel): Likewise. * elf32-d30v.c (d30v_info_to_howto_rel): Likewise. * elf32-dlx.c (dlx_rtype_to_howto): Likewise. * elf32-epiphany.c (epiphany_info_to_howto_rela): Likewise. * elf32-fr30.c (fr30_info_to_howto_rela): Likewise. * elf32-frv.c (frv_info_to_howto_rela): Likewise. * elf32-i960.c (elf32_i960_info_to_howto_rel): Likewise. * elf32-ip2k.c (ip2k_info_to_howto_rela): Likewise. * elf32-iq2000.c (iq2000_info_to_howto_rela): Likewise. * elf32-lm32.c (lm32_info_to_howto_rela): Likewise. * elf32-m32c.c (m32c_info_to_howto_rela): Likewise. * elf32-m32r.c (m32r_info_to_howto_rel): Likewise. * elf32-m68hc11.c (m68hc11_info_to_howto_rel): Likewise. * elf32-m68hc12.c (m68hc11_info_to_howto_rel): Likewise. * elf32-mep.c (mep_info_to_howto_rela): Likewise. * elf32-metag.c (metag_info_to_howto_rela): Likewise. * elf32-moxie.c (moxie_info_to_howto_rela): Likewise. * elf32-msp430.c (msp430_info_to_howto_rela): Likewise. * elf32-mt.c (mt_info_to_howto_rela): Likewise. * elf32-nds32.c (nds32_info_to_howto_rel): Likewise. * elf32-or1k.c (or1k_info_to_howto_rela): Likewise. * elf32-rl78.c (rl78_info_to_howto_rela): Likewise. * elf32-rx.c (rx_info_to_howto_rela): Likewise. * elf32-v850.c (v850_elf_info_to_howto_rel): Likewise. * elf32-visium.c (visium_info_to_howto_rela): Likewise. * elf32-xgate.c (xgate_info_to_howto_rel): Likewise. * elf32-xtensa.c (elf_xtensa_info_to_howto_rela): Likewise. * elf64-mmix.c (mmix_info_to_howto_rela): Likewise. * elf64-x86-64.c (elf_x86_64_reloc_type_lookup): Likewise. * elfnn-aarch64.c (elfNN_aarch64_bfd_reloc_from_type): Likewise. * elf64-sparc.c (elf64_sparc_slurp_one_reloc_table): Add range checking of reloc symbol index. * mach-o.c (bfd_mach_o_canonicalize_one_reloc): If no symbols have been provided then set the reloc's symbol to undefined. * reloc.c (bfd_generic_get_relocated_section_contents): Add range checking of the reloc to be applied. * versados.c (process_otr): Add more range checks. (versados_canonicalize_reloc): If the section is unknown, set the symbol to undefined. * vms-alpha.c (_bfd_vms_slurp_eisd): Add range checks. (alpha_vms_object_p): Likewise. ----------------------------------------------------------------------- Summary of changes: bfd/ChangeLog | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++ bfd/archive.c | 9 ++++++- bfd/elf32-arc.c | 6 ++++- bfd/elf32-avr.c | 6 ++++- bfd/elf32-cr16c.c | 6 ++++- bfd/elf32-cris.c | 6 ++++- bfd/elf32-d10v.c | 6 ++++- bfd/elf32-d30v.c | 12 +++++++++- bfd/elf32-dlx.c | 6 ++++- bfd/elf32-epiphany.c | 5 ++++ bfd/elf32-fr30.c | 6 ++++- bfd/elf32-frv.c | 5 ++++ bfd/elf32-i960.c | 8 ++++++- bfd/elf32-ip2k.c | 5 ++++ bfd/elf32-iq2000.c | 5 ++++ bfd/elf32-lm32.c | 6 ++++- bfd/elf32-m32c.c | 6 ++++- bfd/elf32-m32r.c | 6 ++++- bfd/elf32-m68hc11.c | 6 ++++- bfd/elf32-m68hc12.c | 6 ++++- bfd/elf32-mep.c | 5 ++++ bfd/elf32-metag.c | 6 ++++- bfd/elf32-moxie.c | 6 ++++- bfd/elf32-msp430.c | 12 +++++++++- bfd/elf32-mt.c | 5 ++++ bfd/elf32-nds32.c | 6 ++++- bfd/elf32-or1k.c | 6 ++++- bfd/elf32-rl78.c | 6 ++++- bfd/elf32-rx.c | 6 ++++- bfd/elf32-v850.c | 6 ++++- bfd/elf32-visium.c | 5 ++++ bfd/elf32-xgate.c | 6 ++++- bfd/elf32-xtensa.c | 6 ++++- bfd/elf64-mmix.c | 6 ++++- bfd/elf64-sparc.c | 4 ++- bfd/elf64-x86-64.c | 2 +- bfd/elfnn-aarch64.c | 8 +++++++ bfd/mach-o.c | 2 + bfd/reloc.c | 4 +++ bfd/versados.c | 30 ++++++++++++++++++++------- bfd/vms-alpha.c | 7 +++++- 41 files changed, 279 insertions(+), 40 deletions(-) -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils