USE_MMAP fuzzed object file attacks

H.J. Lu hjl.tools@gmail.com
Thu Apr 4 01:35:50 GMT 2024


On Wed, Apr 3, 2024 at 6:17 PM Alan Modra <amodra@gmail.com> wrote:
>
> If mmap is used without sanity checking, then we'll get a SIGBUS if
> an access is done to the mmap'd memory corresponding to a page past
> end of file.
>
>         * aoutx.h (aout_get_external_symbols): Check that mmap regions
>         are within file contents.  Catch stringsize overflow.
>         (some_aout_object_p): Don't clear already zeroed fields.  Tidy.
>         * pdp11.c: As for aoutx.h.  Copy some fixes too.
>
> HJ, bfd_mmap_local sanity checking doesn't take into account the file
> offset.  Please fix.

Done:

https://sourceware.org/pipermail/binutils/2024-April/133355.html


-- 
H.J.


More information about the Binutils mailing list