PR22303, print_core_note out of bounds read

[deliverable/binutils-gdb.git] / binutils / ChangeLog

diff --git a/binutils/ChangeLog b/binutils/ChangeLog
index 5defa0d59b82622fa9911dcb7ca6a7347f4fed5d..ca01a09e3cf63a1a0fb0f269a638623a692bb1e1 100644 (file)
--- a/binutils/ChangeLog
+++ b/binutils/ChangeLog
@@ -1,3 +1,14 @@
+2017-10-18  Alan Modra  <amodra@gmail.com>
+
+       PR 22303
+       * readelf.c (print_core_note): Ensure "count" sanity check
+       calculation doesn't overflow.
+       (process_notes_at): Perform note namesz and descsz checks
+       using unsigned comparisons against data remaining.  Catch
+       alignment overflow of namesz and descsz too.  Don't allocate a
+       temp for terminating "name" when there is space available
+       before descdata.
+
 2017-10-17  Tom Tromey  <tom@tromey.com>
 
        * MAINTAINERS: Add myself as dwarf-mode.el maintainer.