[Bug binutils/21933] heap buffer overflow in elf_read_notes

2017-08-18 Thread 499671216 at qq dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21933

--- Comment #5 from Zhihua Yao <499671216 at qq dot com> ---
This vulnerability has been applied for CVE-2017-10799, discovered by
zhihua@dbappsecurity.com.cn

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21962] stack overflow in getsym

2017-08-18 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=21962

--- Comment #4 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by Nick Clifton :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=de25939739ffe9a9ad7cec07a35bb2a1e430fe39

commit de25939739ffe9a9ad7cec07a35bb2a1e430fe39
Author: Nick Clifton 
Date:   Fri Aug 18 08:45:12 2017 +0100

Fix buffer overrun parsing a corrupt tekhex binary.

PR binutils/21962
* tekhex.c (getsym): Fix check for source pointer walking off the
end of the input buffer.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21962] stack overflow in getsym

2017-08-18 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=21962

--- Comment #5 from cvs-commit at gcc dot gnu.org  ---
The binutils-2_29-branch branch has been updated by Nick Clifton
:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ebe412a7186f1acbc5753d3236f3cab4999f7b90

commit ebe412a7186f1acbc5753d3236f3cab4999f7b90
Author: Nick Clifton 
Date:   Fri Aug 18 08:47:16 2017 +0100

Fix buffer overrun when parsing a corrupt tekhex binary.

PR binutils/21962
* tekhex.c (getsym): Fix check for source pointer walking off the
end of the input buffer.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21962] stack overflow in getsym

2017-08-18 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21962

Nick Clifton  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |FIXED

--- Comment #6 from Nick Clifton  ---
Hi Zhihua,

  Thanks for the testcase.  The bug was a simple case of an incorrect test
  for a pointer running off the end of an input buffer, and so I have checked
  in a small patch (to mainline and the 2.29 branch) that fixes it.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug gas/21965] Kernel 4.12.5 compile fails -- Error: instruction `andn' isn't supported in 16-bit mode.

2017-08-18 Thread hjl.tools at gmail dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=21965

H.J. Lu  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |INVALID

--- Comment #1 from H.J. Lu  ---
Don't compile kernel with -march=native or get your GCC fixed for

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80569

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/21976] New: ld-x86-64 test suite: plt-main-bnd regex failure

2017-08-18 Thread awilfox at adelielinux dot org
https://sourceware.org/bugzilla/show_bug.cgi?id=21976

Bug ID: 21976
   Summary: ld-x86-64 test suite: plt-main-bnd regex failure
   Product: binutils
   Version: 2.29
Status: UNCONFIRMED
  Severity: normal
  Priority: P2
 Component: binutils
  Assignee: unassigned at sourceware dot org
  Reporter: awilfox at adelielinux dot org
  Target Milestone: ---

Created attachment 10352
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10352&action=edit
Patch to plt-main-bnd.dd

The plt-main-bnd tests all fail on target x86_64-foxkit-linux-musl because
"__cxa_finalize@plt" does not match the regex "[a-z]+@plt".  Adding _ to the
[a-z] group resolves these test failures.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils