https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101810

--- Comment #3 from Alan Modra <amodra at gmail dot com> ---
Making SYMESZ a size_t as the patch does, is a complete fix if the code is only
compiled for 64-bit hosts where unsigned int is smaller than size_t.  If
compiled for 32-bit then the expression calculating buffer size can overflow
leading to similar segfaults on fuzzed object files.  As explained by the
comment.

Reply via email to