FreeChainXenon/binutils-gdb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prevent memory exhaustion from a corrupt PE binary with an overlarge number of relocs.

Browse source 
PR 21440
	* objdump.c (dump_relocs_in_section): Check for an excessive
	number of relocs before attempting to dump them.
This commit is contained in:
Nick Clifton 2017-05-02 11:54:53 +01:00
parent d050f7d7f4
commit 39ff1b79f6
2 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
binutils/objdump.c
View file

@ -3379,6 +3379,14 @@ dump_relocs_in_section (bfd *abfd,
return;
}
if ((bfd_get_file_flags (abfd) & (BFD_IN_MEMORY | BFD_LINKER_CREATED)) == 0
&& relsize > get_file_size (bfd_get_filename (abfd)))
{
printf (" (too many: 0x%x)\n", section->reloc_count);
bfd_set_error (bfd_error_file_truncated);
bfd_fatal (bfd_get_filename (abfd));
}
relpp = (arelent **) xmalloc (relsize);
relcount = bfd_canonicalize_reloc (abfd, section, relpp, syms);