[Bug general/23542] New: heap-buffer-overflow in /elfutils/src/elflint.c:2055 check_sysv_hash

2018-08-16 Thread wcventure at 126 dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=23542 Bug ID: 23542 Summary: heap-buffer-overflow in /elfutils/src/elflint.c:2055 check_sysv_hash Product: elfutils Version: unspecified Status: UNCONFIRMED Severi

[Bug libdw/23541] New: heap-buffer-overflow in /elfutils/libdw/dwarf_getaranges.c:156

2018-08-16 Thread wcventure at 126 dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=23541 Bug ID: 23541 Summary: heap-buffer-overflow in /elfutils/libdw/dwarf_getaranges.c:156 Product: elfutils Version: unspecified Status: UNCONFIRMED Severity: no

Re: [PATCH] libelf/elf_end.c: check data_list.data.d.d_buf before free it

2018-08-16 Thread Jan Pokorný
On 16/08/18 21:25 +0200, Mark Wielaard wrote: > On Thu, Aug 16, 2018 at 10:34:23AM +0800, Robert Yang wrote: >> The one which actually saves the data is data_list.data.d.d_buf, so check it >> before free rawdata_base. >> >> This can fix a segmentation fault when prelink libqb_1.0.3: >> prelink: /u

Re: [PATCH] libelf/elf_end.c: check data_list.data.d.d_buf before free it

2018-08-16 Thread Mark Wielaard
Hi, On Thu, Aug 16, 2018 at 10:34:23AM +0800, Robert Yang wrote: > The one which actually saves the data is data_list.data.d.d_buf, so check it > before free rawdata_base. > > This can fix a segmentation fault when prelink libqb_1.0.3: > prelink: /usr/lib/libqb.so.0.18.2: Symbol section index out