Commit: Fix CVE-2026-19582

[Nick Clifton]

Hi Guys,

  I am applying the attached patch to fix CVE-2026-19582.

  This is an annoying, not really valid as a CVE, bug which is based
  upon the fact that peXXigen.c:rsrc_sort_entries() uses a fixed size
  static buffer for constructing error messages.  A specially crafted
  (and invalid) PE format input file could trigger a buffer overflow
  potentially causing the linker to crash.

  The fix I have chosen is to change the buffer into a rsrc_string
  structure and to use this to keep track of the space remaining whilst
  constructing the error message.  Which is a lot of faff for a case
  that will almost certainly never arise.  But hey ho, the bug has
  been reported and now it is fixed.

Cheers
  Nick

https://bugzilla.redhat.com/show_bug.cgi?id=2513754

-------------- next part --------------
A non-text attachment was scrubbed...
Name: peXXigen.c.patch
Type: text/x-patch
Size: 8066 bytes
Desc: not available
URL: <https://sourceware.org/pipermail/binutils/attachments/20260902/965353ce/attachment.bin>