MatCat.OpenSource/8sa1-binutils-gdb
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

asan: alpha-vms: buffer overflow

Browse Source 
* vms-misc.c (_bfd_vms_save_counted_string): Count length byte
	towards maxlen.
This commit is contained in:
Alan Modra 2020-10-25 22:21:45 +10:30
parent 4690795539
commit 0c70050a4b
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
bfd/ChangeLog
View File

@ -1,3 +1,8 @@
2020-10-25 Alan Modra <amodra@gmail.com>
* vms-misc.c (_bfd_vms_save_counted_string): Count length byte
towards maxlen.
2020-10-20 Dr. David Alan Gilbert <dgilbert@redhat.com> 2020-10-20 Dr. David Alan Gilbert <dgilbert@redhat.com>
* po/es.po: Fix printf format. * po/es.po: Fix printf format.

7
bfd/vms-misc.c
View File

@ -163,9 +163,12 @@ _bfd_vms_save_sized_string (bfd *abfd, unsigned char *str, size_t size)
char * char *
_bfd_vms_save_counted_string (bfd *abfd, unsigned char *ptr, size_t maxlen) _bfd_vms_save_counted_string (bfd *abfd, unsigned char *ptr, size_t maxlen)
{ {
unsigned int len = *ptr++; unsigned int len;
if (len > maxlen) if (maxlen == 0)
return NULL;
len = *ptr++;
if (len > maxlen - 1)
return NULL; return NULL;
return _bfd_vms_save_sized_string (abfd, ptr, len); return _bfd_vms_save_sized_string (abfd, ptr, len);
} }