[PATCH] Buffer overrun in objcopy

Eirik Byrkjeflot Anonsen eirik@opera.com
Fri Dec 18 14:08:00 GMT 2009


Using objcopy from binutils 2.20.

When using objcopy to rename symbols using add_redefine_syms_file(), if
one of the source symbols is exactly 99 characters, the input buffer
will be overrun (by the first character in the target symbol).  The
attached patch copies the buffer resize code to the two places in this
function where I think it could potentially be a problem.

eirik

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Extend-read-buffer-to-avoid-buffer-overruns.patch
Type: text/x-diff
Size: 964 bytes
Desc: not available
URL: <https://sourceware.org/pipermail/binutils/attachments/20091218/2041ff18/attachment.bin>


More information about the Binutils mailing list