espressif/binutils-gdb
1
0
Fork 0
mirror of https://github.com/espressif/binutils-gdb.git synced 2025-06-28 15:18:37 +08:00
Code Issues Packages Projects Releases Wiki Activity

alpha-vms: prevent endless recursion

Browse Source 
* vms-lib.c (vms_traverse_index): Add recur_count param and
	update calls.  Fail on excessive recursion.
This commit is contained in:
Alan Modra
2020-03-02 10:10:55 +10:30
parent 9cb56943d7
commit 26f60d5939
2 changed files with 15 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
bfd/ChangeLog
View File

@ -1,3 +1,8 @@
2020-03-02 Alan Modra <amodra@gmail.com>
* vms-lib.c (vms_traverse_index): Add recur_count param and
update calls. Fail on excessive recursion.
2020-03-02 Alan Modra <amodra@gmail.com> 2020-03-02 Alan Modra <amodra@gmail.com>
* vms-alpha.c (vms_get_remaining_object_record): Use * vms-alpha.c (vms_get_remaining_object_record): Use

13
bfd/vms-lib.c
View File

@ -242,7 +242,8 @@ vms_write_block (bfd *abfd, unsigned int vbn, void *blk)
If the entry is indirect, recurse. */ If the entry is indirect, recurse. */
static bfd_boolean static bfd_boolean
vms_traverse_index (bfd *abfd, unsigned int vbn, struct carsym_mem *cs) vms_traverse_index (bfd *abfd, unsigned int vbn, struct carsym_mem *cs,
unsigned int recur_count)
{ {
struct vms_indexdef indexdef; struct vms_indexdef indexdef;
file_ptr off; file_ptr off;
@ -250,6 +251,12 @@ vms_traverse_index (bfd *abfd, unsigned int vbn, struct carsym_mem *cs)
unsigned char *endp; unsigned char *endp;
unsigned int n; unsigned int n;
if (recur_count == 100)
{
bfd_set_error (bfd_error_bad_value);
return FALSE;
}
/* Read the index block. */ /* Read the index block. */
BFD_ASSERT (sizeof (indexdef) == VMS_BLOCK_SIZE); BFD_ASSERT (sizeof (indexdef) == VMS_BLOCK_SIZE);
if (!vms_read_block (abfd, vbn, &indexdef)) if (!vms_read_block (abfd, vbn, &indexdef))
@ -307,7 +314,7 @@ vms_traverse_index (bfd *abfd, unsigned int vbn, struct carsym_mem *cs)
if (idx_off == RFADEF__C_INDEX) if (idx_off == RFADEF__C_INDEX)
{ {
/* Indirect entry. Recurse. */ /* Indirect entry. Recurse. */
if (!vms_traverse_index (abfd, idx_vbn, cs)) if (!vms_traverse_index (abfd, idx_vbn, cs, recur_count + 1))
return FALSE; return FALSE;
} }
else else
@ -454,7 +461,7 @@ vms_lib_read_index (bfd *abfd, int idx, unsigned int *nbrel)
/* Note: if the index is empty, there is no block to traverse. */ /* Note: if the index is empty, there is no block to traverse. */
vbn = bfd_getl32 (idd.vbn); vbn = bfd_getl32 (idd.vbn);
if (vbn != 0 && !vms_traverse_index (abfd, vbn, &csm)) if (vbn != 0 && !vms_traverse_index (abfd, vbn, &csm, 0))
{ {
if (csm.realloced) if (csm.realloced)
free (csm.idx); free (csm.idx);