[Bug backends/34402] NULL pointer dereference in sparc_check_object_attribute() via crafted SPARC ELF

[mark at klomp dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=34402

Mark Wielaard <mark at klomp dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED
                 CC|                            |mark at klomp dot org

--- Comment #1 from Mark Wielaard <mark at klomp dot org> ---
Thanks, it took me a while to realize what really was going on. We forgot the
bit29 reserved string in the hwcaps name array. Pushed as:

commit 01a933566e2606e17893a72121e70c81ba7558dc
Author: Mark Wielaard <mark@klomp.org>
Date:   Thu Jul 16 22:47:18 2026 +0200

    backends: define strings for all sparc hwcap bits

    Not all sparc hwcaps bits do have a defined meaning. For those that
    don't we use the "resvBIT" string, where BIT is 0..31. Bits 29 to 31
    weren't defined, but we forgot to add the "resv29" string causing an
    off-by one when trying to find the name for bit 30 (called "resv31")
    and 31 (not set, so NULL).

            * backends/sparc_attrs.c (sparc_check_object_attribute):
            insert "resv29" into hwcaps array.

    https://sourceware.org/bugzilla/show_bug.cgi?id=34402

    Reported-by: nathan auvray <nathan.auvray60@gmail.com>
    Signed-off-by: Mark Wielaard <mark@klomp.org>

-- 
You are receiving this mail because:
You are on the CC list for the bug.