espressif/binutils-gdb
1
0
Fork 0
mirror of https://github.com/espressif/binutils-gdb.git synced 2025-06-22 11:00:01 +08:00
Code Issues Packages Projects Releases Wiki Activity

PR28175, Segment fault in coff-tic30.c reloc_processing

Browse Source 
The obj_convert table shouldn't be accessed without first checking the
index against the table size.

	PR 28175
	* coff-tic30.c (reloc_processing): Sanity check reloc symbol index.
	* coff-z80.c (reloc_processing): Likewise.
	* coff-z8k.c (reloc_processing): Likewise.
This commit is contained in:
Alan Modra
2021-08-06 20:48:41 +09:30
parent a379e7588c
commit e039f7ed86
3 changed files with 30 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
bfd/coff-tic30.c
View File

@ -161,11 +161,18 @@ reloc_processing (arelent *relent,
relent->address = reloc->r_vaddr; relent->address = reloc->r_vaddr;
rtype2howto (relent, reloc); rtype2howto (relent, reloc);
if (reloc->r_symndx > 0) if (reloc->r_symndx == -1)
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
else if (reloc->r_symndx >= 0 && reloc->r_symndx < obj_conv_table_size (abfd))
relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx]; relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx];
else else
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr; {
_bfd_error_handler
/* xgettext:c-format */
(_("%pB: warning: illegal symbol index %ld in relocs"),
abfd, reloc->r_symndx);
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
}
relent->addend = reloc->r_offset; relent->addend = reloc->r_offset;
relent->address -= section->vma; relent->address -= section->vma;
} }

13
bfd/coff-z80.c
View File

@ -314,11 +314,18 @@ reloc_processing (arelent *relent,
relent->address = reloc->r_vaddr; relent->address = reloc->r_vaddr;
rtype2howto (relent, reloc); rtype2howto (relent, reloc);
if (reloc->r_symndx > 0) if (reloc->r_symndx == -1)
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
else if (reloc->r_symndx >= 0 && reloc->r_symndx < obj_conv_table_size (abfd))
relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx]; relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx];
else else
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr; {
_bfd_error_handler
/* xgettext:c-format */
(_("%pB: warning: illegal symbol index %ld in relocs"),
abfd, reloc->r_symndx);
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
}
relent->addend = reloc->r_offset; relent->addend = reloc->r_offset;
relent->address -= section->vma; relent->address -= section->vma;
} }

13
bfd/coff-z8k.c
View File

@ -177,11 +177,18 @@ reloc_processing (arelent *relent,
relent->address = reloc->r_vaddr; relent->address = reloc->r_vaddr;
rtype2howto (relent, reloc); rtype2howto (relent, reloc);
if (reloc->r_symndx > 0) if (reloc->r_symndx == -1)
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
else if (reloc->r_symndx >= 0 && reloc->r_symndx < obj_conv_table_size (abfd))
relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx]; relent->sym_ptr_ptr = symbols + obj_convert (abfd)[reloc->r_symndx];
else else
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr; {
_bfd_error_handler
/* xgettext:c-format */
(_("%pB: warning: illegal symbol index %ld in relocs"),
abfd, reloc->r_symndx);
relent->sym_ptr_ptr = bfd_abs_section_ptr->symbol_ptr_ptr;
}
relent->addend = reloc->r_offset; relent->addend = reloc->r_offset;
relent->address -= section->vma; relent->address -= section->vma;
} }