USE_MMAP fuzzed object file attacks
H.J. Lu
hjl.tools@gmail.com
Thu Apr 4 01:35:50 GMT 2024
On Wed, Apr 3, 2024 at 6:17 PM Alan Modra <amodra@gmail.com> wrote:
>
> If mmap is used without sanity checking, then we'll get a SIGBUS if
> an access is done to the mmap'd memory corresponding to a page past
> end of file.
>
> * aoutx.h (aout_get_external_symbols): Check that mmap regions
> are within file contents. Catch stringsize overflow.
> (some_aout_object_p): Don't clear already zeroed fields. Tidy.
> * pdp11.c: As for aoutx.h. Copy some fixes too.
>
> HJ, bfd_mmap_local sanity checking doesn't take into account the file
> offset. Please fix.
Done:
https://sourceware.org/pipermail/binutils/2024-April/133355.html
--
H.J.
More information about the Binutils
mailing list