Control: tags 1101470 confirmed pending

Paul Brook wrote...

> Buffer overrun leading to a crash when parsing ELF files with a large
> PT_INTERP segment.

Thanks for the report. Upstream seems to have fixed that after the 5.46
release, but in a different way:

https://github.com/file/file/commit/FILE5_46-7-gb3384a1f

The resolves the issue, at least for the reproducer you've provided. If
you think this is not sufficient, please let me know soon.

Upload of a fixed version to upstable will follow soon.

FTR, this was introduced in upstream commit <FILE5_45-251-g87ed2d47>¹,
therefore neither Debian 13 ("trixie") nor any older release are
affected.

    Christoph

¹ https://github.com/file/file/commit/FILE5_45-251-g87ed2d47

Attachment: signature.asc
Description: PGP signature

Reply via email to