Fuzzed files in archives
Given a fuzzed object file in an archive with section size exceeding file size, objcopy will report an error like "section size (0xfeffffff bytes) is larger than file size (0x17a bytes)" but will create a copy of the object laid out for the large section. That means a large temporary file on disk that is read back and written to the output archive, which can take a while. The output archive is then deleted due to the error. Avoid some of this silliness. * objcopy.c (copy_section): If section contents cannot be read set output section size to zero.
This commit is contained in:
parent
686657b66c
commit
ffbe89531c
1 changed files with 1 additions and 0 deletions
|
@ -4418,6 +4418,7 @@ copy_section (bfd *ibfd, sec_ptr isection, void *obfdarg)
|
|||
|| !bfd_convert_section_contents (ibfd, isection, obfd,
|
||||
&memhunk, &size))
|
||||
{
|
||||
bfd_set_section_size (osection, 0);
|
||||
status = 1;
|
||||
bfd_nonfatal_message (NULL, ibfd, isection, NULL);
|
||||
free (memhunk);
|
||||
|
|
Loading…
Add table
Reference in a new issue