Prevent a buffer overrun whilst displaying corrupt ARM tags.

	PR binutils/17531
	* readelf.c (display_arm_attribute): Avoid reading off the end of
	the buffer when processing a Tag_nodefaults.

diff --git a/binutils/ChangeLog b/binutils/ChangeLog
index 2e71311f49a040b2592261477a4e2b7eebbf225c..f7a58a88a0bf1b1c95eba1672c97dd2d7587a16d 100644 (file)
--- a/binutils/ChangeLog
+++ b/binutils/ChangeLog
@@ -1,3 +1,9 @@
+2014-11-11  Nick Clifton  <nickc@redhat.com>
+
+       PR binutils/17531
+       * readelf.c (display_arm_attribute): Avoid reading off the end of
+       the buffer when processing a Tag_nodefaults.
+
 2014-11-10  Nick Clifton  <nickc@redhat.com>
 
        PR binutils/17531

diff --git a/binutils/readelf.c b/binutils/readelf.c
index 91d55815658f22a931cf3acfd4eb10da0efb3378..083096090e9122e42153159fbb5bdc0e1a726ed4 100644 (file)
--- a/binutils/readelf.c
+++ b/binutils/readelf.c
@@ -12054,7 +12054,9 @@ display_arm_attribute (unsigned char * p,
              break;
 
            case 64: /* Tag_nodefaults.  */
-             p++;
+             /* PR 17531: file: 001-505008-0.01.  */
+             if (p < end)
+               p++;
              printf (_("True\n"));
              break;