summaryrefslogtreecommitdiff
path: root/system/binutils/CVE-2019-14444.patch
diff options
context:
space:
mode:
authorMax Rees <maxcrees@me.com>2019-09-30 11:51:43 -0500
committerMax Rees <maxcrees@me.com>2019-09-30 11:51:43 -0500
commit03714f9c021bca9fa83820d0248e16593217ad01 (patch)
treec5df46b653c94dfc88826589697b4d109be26f42 /system/binutils/CVE-2019-14444.patch
parent26ea0e09f360bd226d8ba765cbf621c0ca8dd809 (diff)
downloadpackages-03714f9c021bca9fa83820d0248e16593217ad01.tar.gz
packages-03714f9c021bca9fa83820d0248e16593217ad01.tar.bz2
packages-03714f9c021bca9fa83820d0248e16593217ad01.tar.xz
packages-03714f9c021bca9fa83820d0248e16593217ad01.zip
system/binutils: patch CVE-2019-14444 (#174)
Diffstat (limited to 'system/binutils/CVE-2019-14444.patch')
-rw-r--r--system/binutils/CVE-2019-14444.patch28
1 files changed, 28 insertions, 0 deletions
diff --git a/system/binutils/CVE-2019-14444.patch b/system/binutils/CVE-2019-14444.patch
new file mode 100644
index 000000000..43d4e2a91
--- /dev/null
+++ b/system/binutils/CVE-2019-14444.patch
@@ -0,0 +1,28 @@
+From e17869db99195849826eaaf5d2d0eb2cfdd7a2a7 Mon Sep 17 00:00:00 2001
+From: Nick Clifton <nickc@redhat.com>
+Date: Mon, 5 Aug 2019 10:40:35 +0100
+Subject: [PATCH] Catch potential integer overflow in readelf when processing
+ corrupt binaries.
+
+ PR 24829
+ * readelf.c (apply_relocations): Catch potential integer overflow
+ whilst checking reloc location against section size.
+---
+ binutils/readelf.c | 2 +-
+
+diff --git a/binutils/readelf.c b/binutils/readelf.c
+index b896ad9..e785fde 100644
+--- a/binutils/readelf.c
++++ b/binutils/readelf.c
+@@ -13366,7 +13366,7 @@ apply_relocations (Filedata * filedata,
+ }
+
+ rloc = start + rp->r_offset;
+- if ((rloc + reloc_size) > end || (rloc < start))
++ if (rloc >= end || (rloc + reloc_size) > end || (rloc < start))
+ {
+ warn (_("skipping invalid relocation offset 0x%lx in section %s\n"),
+ (unsigned long) rp->r_offset,
+--
+2.9.3
+