asan: readelf: stack buffer overflow

* readelf.c (print_dynamic_symbol): Don't sprintf to buffer to
	find string length.
This commit is contained in:
Alan Modra 2020-07-06 09:00:29 +09:30
parent c56374d118
commit ddb43bab17
2 changed files with 7 additions and 2 deletions

View file

@ -12091,9 +12091,9 @@ print_dynamic_symbol (Filedata *filedata, unsigned long si,
int len_avail = 21;
if (! do_wide && version_string != NULL)
{
char buffer[256];
char buffer[16];
len_avail -= sprintf (buffer, "@%s", version_string);
len_avail -= 1 + strlen (version_string);
if (sym_info == symbol_undefined)
len_avail -= sprintf (buffer," (%d)", vna_other);