espressif/binutils-gdb
1
0
Fork 0
mirror of https://github.com/espressif/binutils-gdb.git synced 2025-05-20 08:47:19 +08:00
Code Issues Packages Projects Releases Wiki Activity

nm: heap-buffer-overflow at elfcode.h:1507 in bfd_elf64_slurp_symbol_table

Browse Source 
PR 30885
  * elfcode.h (elf_slurp_symbol_table): Compute the symcount for non dynamic symbols in the same way as _bfd_elf_get_symtab_upper_bound.
This commit is contained in:
Nick Clifton
2023-09-27 16:09:06 +01:00
parent 58bceb1827
commit 4befded43f
2 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
bfd/ChangeLog
View File

@ -1,3 +1,9 @@
2023-09-27 Nick Clifton <nickc@redhat.com>
PR 30885
* elfcode.h (elf_slurp_symbol_table): Compute the symcount for non
dynamic symbols in the same way as _bfd_elf_get_symtab_upper_bound.
2023-09-13 Jacob Navia <jacob@jacob.remcomp.fr> 2023-09-13 Jacob Navia <jacob@jacob.remcomp.fr>
* elf.c (_bfd_elf_init_reloc_shdr): Don't segfault on alloc fail. * elf.c (_bfd_elf_init_reloc_shdr): Don't segfault on alloc fail.

7
bfd/elfcode.h
View File

@ -1255,11 +1255,13 @@ elf_slurp_symbol_table (bfd *abfd, asymbol **symptrs, bool dynamic)
symbols. We actually use all the ELF symbols, so there will be no symbols. We actually use all the ELF symbols, so there will be no
space left over at the end. When we have all the symbols, we space left over at the end. When we have all the symbols, we
build the caller's pointer vector. */ build the caller's pointer vector. */
ebd = get_elf_backend_data (abfd);
if (! dynamic) if (! dynamic)
{ {
hdr = &elf_tdata (abfd)->symtab_hdr; hdr = &elf_tdata (abfd)->symtab_hdr;
verhdr = NULL; verhdr = NULL;
symcount = hdr->sh_size / ebd->s->sizeof_sym;
} }
else else
{ {
@ -1278,12 +1280,13 @@ elf_slurp_symbol_table (bfd *abfd, asymbol **symptrs, bool dynamic)
if (!_bfd_elf_slurp_version_tables (abfd, false)) if (!_bfd_elf_slurp_version_tables (abfd, false))
return -1; return -1;
} }
symcount = elf_tdata (abfd)->dt_symtab_count;
} }
ebd = get_elf_backend_data (abfd);
symcount = elf_tdata (abfd)->dt_symtab_count;
if (symcount == 0) if (symcount == 0)
symcount = hdr->sh_size / sizeof (Elf_External_Sym); symcount = hdr->sh_size / sizeof (Elf_External_Sym);
if (symcount == 0) if (symcount == 0)
sym = symbase = NULL; sym = symbase = NULL;
else else