PR23148, Heap buffer overflow in pe_print_edata

	PR 23148
	* peXXigen.c (pe_print_edata): Correct minimum size.

diff --git a/bfd/ChangeLog b/bfd/ChangeLog
index f158067af5960b8c271882ce3b021c2a5a47259f..ecae71697928e9d85ff6ed10da3b333654673fde 100644 (file)
--- a/bfd/ChangeLog
+++ b/bfd/ChangeLog
@@ -1,3 +1,8 @@
+2018-05-09  Alan Modra  <amodra@gmail.com>
+
+       PR 23148
+       * peXXigen.c (pe_print_edata): Correct minimum size.
+

 2018-05-09  Alan Modra  <amodra@gmail.com>
 
        PR 23147
 2018-05-09  Alan Modra  <amodra@gmail.com>
 
        PR 23147

diff --git a/bfd/peXXigen.c b/bfd/peXXigen.c
index b32cc18681d4c2ad14e917822cafef7569a43f7c..598f2ca3ac83ef0325ecebd0a674b17a0584b86d 100644 (file)
--- a/bfd/peXXigen.c
+++ b/bfd/peXXigen.c
@@ -1671,7 +1671,7 @@ pe_print_edata (bfd * abfd, void * vfile)
     }
 
   /* PR 17512: Handle corrupt PE binaries.  */
     }
 
   /* PR 17512: Handle corrupt PE binaries.  */

-  if (datasize < 36)
+  if (datasize < 40)

     {
       fprintf (file,
               /* xgettext:c-format */
     {
       fprintf (file,
               /* xgettext:c-format */