[PATCH] Buffer overrun in objcopy
Eirik Byrkjeflot Anonsen
eirik@opera.com
Fri Dec 18 14:08:00 GMT 2009
Using objcopy from binutils 2.20.
When using objcopy to rename symbols using add_redefine_syms_file(), if
one of the source symbols is exactly 99 characters, the input buffer
will be overrun (by the first character in the target symbol). The
attached patch copies the buffer resize code to the two places in this
function where I think it could potentially be a problem.
eirik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Extend-read-buffer-to-avoid-buffer-overruns.patch
Type: text/x-diff
Size: 964 bytes
Desc: not available
URL: <https://sourceware.org/pipermail/binutils/attachments/20091218/2041ff18/attachment.bin>
More information about the Binutils
mailing list