rpms/binutils
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix potential integer overflow in GOLD.

Browse Source 
Resolves: #1739491
This commit is contained in:
Nick Clifton 2019-08-09 14:51:53 +01:00
parent 1f0862a7b6
commit 79f83cf3ce
2 changed files with 26 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
binutils-CVE-2019-14250.patch Normal file
View File

@ -0,0 +1,17 @@
--- binutils.orig/libiberty/simple-object-elf.c 2019-08-09 14:13:51.677330065 +0100
+++ binutils-2.32/libiberty/simple-object-elf.c 2019-08-09 14:14:31.177076298 +0100
@@ -549,6 +549,14 @@ simple_object_elf_match (unsigned char h
return NULL;
}
+ if (eor->shstrndx == 0)
+ {
+ *errmsg = "invalid ELF shstrndx == 0";
+ *err = 0;
+ XDELETE (eor);
+ return NULL;
+ }
+
return (void *) eor;
}

10
binutils.spec
View File

@ -2,7 +2,7 @@
Summary: A GNU collection of binary utilities Summary: A GNU collection of binary utilities
Name: %{?cross}binutils%{?_with_debug:-debug} Name: %{?cross}binutils%{?_with_debug:-debug}
Version: 2.32 Version: 2.32
Release: 22%{?dist} Release: 23%{?dist}
License: GPLv3+ License: GPLv3+
URL: https://sourceware.org/binutils URL: https://sourceware.org/binutils
@ -248,6 +248,10 @@ Patch26: binutils-objcopy-gnu-build-version-notes.patch
# Lifetime: Fixed in 2.33 # Lifetime: Fixed in 2.33
Patch27: binutils-CVE-2019-1010204.patch Patch27: binutils-CVE-2019-1010204.patch
# Purpose: Add check to libiberty library in order to prevent an integer overflow in the gold linker.
# Lifetime: Fixed in 2.33
Patch28: binutils-CVE-2019-14250.patch
#---------------------------------------------------------------------------- #----------------------------------------------------------------------------
Provides: bundled(libiberty) Provides: bundled(libiberty)
@ -401,6 +405,7 @@ Conflicts: gcc-c++ < 4.0.0
%patch25 -p1 %patch25 -p1
%patch26 -p1 %patch26 -p1
%patch27 -p1 %patch27 -p1
%patch28 -p1
# We cannot run autotools as there is an exact requirement of autoconf-2.59. # We cannot run autotools as there is an exact requirement of autoconf-2.59.
# FIXME - this is no longer true. Maybe try reinstating autotool use ? # FIXME - this is no longer true. Maybe try reinstating autotool use ?
@ -797,6 +802,9 @@ exit 0
#---------------------------------------------------------------------------- #----------------------------------------------------------------------------
%changelog %changelog
* Fri Aug 09 2019 Nick Clifton <nickc@redhat.com> - 2.32-23
- Fix potential integer overflow in GOLD. (#1739491)
* Tue Aug 06 2019 Nick Clifton <nickc@redhat.com> - 2.32-22 * Tue Aug 06 2019 Nick Clifton <nickc@redhat.com> - 2.32-22
- Stop GOLD from seg-faulting on a corrupt input with a fuzzed section offset. (#1735605) - Stop GOLD from seg-faulting on a corrupt input with a fuzzed section offset. (#1735605)