[Bug binutils/32399] A heap buffer overflow is found in display_bfd of binutils 2.44 (HEAD) in size.c:354

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32399

--- Comment #1 from Sourceware Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Alan Modra <amodra@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1e3b2da08eb21042f01a9f6862b487ca77484c92

commit 1e3b2da08eb21042f01a9f6862b487ca77484c92
Author: Alan Modra <amodra@gmail.com>
Date:   Fri Nov 29 10:18:36 2024 +1030

    PR32399, buffer overflow printing core_file_failing_command

    Assorted targets do not check, as the ELF targets do, that the program
    name in a core file is NUL terminated.  Fix some of them.  I haven't
    attempted to fix all targets because editing host specific code can
    easily result in build bugs, which aren't discovered until someone
    build binutils for that host.  (Of the files edited here, I can't
    easily compile hpux-core.c and osf-core.c on a linux system.)

            PR 32399
            * hppabsd-core.c (hppabsd_core_core_file_p): Ensure core_command
            string is terminated.
            * hpux-core.c (hpux_core_core_file_p): Likewise.
            * irix-core.c (irix_core_core_file_p): Likewise.
            * lynx-core.c (lynx_core_file_p): Likewise.
            * osf-core.c (osf_core_core_file_p): Likewise.
            * mach-o.c (bfd_mach_o_core_file_failing_command): Likewise.

-- 
You are receiving this mail because:
You are on the CC list for the bug.