mirrors/binutils-gdb
0
0
Fork 0
mirror of https://sourceware.org/git/binutils-gdb.git synced 2024-11-27 12:03:41 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

PR28165, buffer overflow in elf32-rx.c:rx_info_to_howto_rela

Browse Source 
PR 28165
	* elf32-rx.c (rx_elf_howto_table): Add missing empty entries.
	(rx_info_to_howto_rela): Assert rx_elf_howto_table is correct size.
	Use actual size when sanity checking r_type.
This commit is contained in:
Alan Modra 2021-08-05 17:19:08 +09:30
parent 5570ab7f44
commit 4939c49d21
1 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
bfd/elf32-rx.c
View File

@ -211,7 +211,17 @@ static reloc_howto_type rx_elf_howto_table [] =
RXREL (OPshla, 2, 32, 0, dont, false),
RXREL (OPshra, 2, 32, 0, dont, false),
RXREL (OPsctsize, 2, 32, 0, dont, false),
EMPTY_HOWTO (0x89),
EMPTY_HOWTO (0x8a),
EMPTY_HOWTO (0x8b),
EMPTY_HOWTO (0x8c),
RXREL (OPscttop, 2, 32, 0, dont, false),
EMPTY_HOWTO (0x8e),
EMPTY_HOWTO (0x8f),
RXREL (OPand, 2, 32, 0, dont, false),
RXREL (OPor, 2, 32, 0, dont, false),
RXREL (OPxor, 2, 32, 0, dont, false),
@ -307,7 +317,8 @@ rx_info_to_howto_rela (bfd * abfd,
unsigned int r_type;
r_type = ELF32_R_TYPE (dst->r_info);
if (r_type >= (unsigned int) R_RX_max)
BFD_ASSERT (R_RX_max == ARRAY_SIZE (rx_elf_howto_table));
if (r_type >= ARRAY_SIZE (rx_elf_howto_table))
{
/* xgettext:c-format */
_bfd_error_handler (_("%pB: unsupported relocation type %#x"),