Commit: de25939739ffe9a9ad7cec07a35bb2a1e430fe39 - binutils_os216 (git)

GNU Binutils with patches for OS216

Commit MetaInfo

• Révision: de25939739ffe9a9ad7cec07a35bb2a1e430fe39 (tree)
• l'heure: 2017-08-18 16:45:12
• Auteur: Nick Clifton <nickc@redh...>
• Commiter: Nick Clifton

Message de Log

Fix buffer overrun parsing a corrupt tekhex binary.

PR binutils/21962
* tekhex.c (getsym): Fix check for source pointer walking off the
end of the input buffer.

Change Summary

• modified: bfd/ChangeLog
• modified: bfd/tekhex.c

Modification

--- a/bfd/ChangeLog
+++ b/bfd/ChangeLog
@@ -1,3 +1,9 @@
[phone]  Nick Clifton  <[e-mail]>
+
+	PR binutils/21962
+	* tekhex.c (getsym): Fix check for source pointer walking off the
+	end of the input buffer.
+
 2017-08-17  Szabolcs Nagy  <[e-mail]>
 
 	PR ld/18808

--- a/bfd/tekhex.c
+++ b/bfd/tekhex.c
@@ -307,7 +307,7 @@ getsym (char *dstp, char **srcp, unsigned int *lenp, char * endp)
   len = hex_value (*src++);
   if (len == 0)
     len = 16;
-  for (i = 0; i < len && src < endp; i++)
+  for (i = 0; i < len && (src + i) < endp; i++)
     dstp[i] = src[i];
   dstp[i] = 0;
   *srcp = src + i;