]> code.ossystems Code Review - openembedded-core.git/commit
binutils: CVE-2017-9954
authorThiruvadi Rajaraman <trajaraman@mvista.com>
Thu, 21 Sep 2017 14:12:19 +0000 (19:42 +0530)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 7 Jan 2018 17:09:48 +0000 (17:09 +0000)
commit162fce9416dcde1a0b7edfbf772fa6e6e18c46a4
tree3b10e1a2fe70c4bc99897c4ae0b9956f5e64b417
parentf8542a9cf50c8001f675f68e42234c306d8ce1e7
binutils: CVE-2017-9954

Source: binutils-gdb.git
MR: 73906
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: 13858130a02bbe84744fd33ecbf2bbbd2360c09c
Description:

 Fix address violation parsing a corrupt texhex format file.

        PR binutils/21670
        * tekhex.c (getvalue): Check for the source pointer exceeding the
        end pointer before the first byte is read.

Affects: <= 2.28
Author: Nick Clifton <nickc@redhat.com>
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-devtools/binutils/binutils-2.27.inc
meta/recipes-devtools/binutils/binutils/CVE-2017-9954.patch [new file with mode: 0644]