https://sourceware.org/bugzilla/show_bug.cgi?id=995
--- Comment #4 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> --- The master branch has been updated by Alan Modra <amo...@sourceware.org>: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=c27cdb4c534e0b52ea877b6800f832756ee16a2f commit c27cdb4c534e0b52ea877b6800f832756ee16a2f Author: Alan Modra <amo...@gmail.com> Date: Mon Nov 1 00:20:01 2021 +1030 objcopy buffer overflow "tocopy" in this code was an int, which when the size to be copied was larger than MAXINT could result in tocopy being negative. A negative value of course is less than BUFSIZE, but when converted to bfd_size_type is extremely large. PR 995 * objcopy.c (copy_unknown_object): Correct calculation of "tocopy". Use better variable types. -- You are receiving this mail because: You are on the CC list for the bug.
