diff options
author | Thiruvadi Rajaraman <trajaraman@mvista.com> | 2017-09-21 19:14:03 +0530 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2018-01-07 17:10:08 +0000 |
commit | 30c6b863474ddf7381f4559bf6221a3931026bbb (patch) | |
tree | 7101afc4ae518f3a026444e3639f3766e6bcfdae /meta/recipes-devtools/binutils/binutils | |
parent | 776302af499938bf5d058d0d0957209f09c60900 (diff) | |
download | poky-30c6b863474ddf7381f4559bf6221a3931026bbb.tar.gz |
binutils: CVE-2017-9748
Source: binutils-gdb.git
MR: 74023
Type: Security Fix
Disposition: Backport from binutils-2_29
ChangeID: efff4d9ed538ff859ab5105a3594690e860d0779
Description:
Avoid a possible compiler bug by using a static buffer instead of a stack local buffer.
PR binutils/21582
* ieee.c (ieee_object_p): Use a static buffer to avoid compiler
bugs.
Affects: <= 2.28
Author: Nick Clifton <nickc@redhat.com>
(From OE-Core rev: fe9fed67e2f62223626f6683b197bc3b55092d54)
Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com>
Reviewed-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-devtools/binutils/binutils')
-rw-r--r-- | meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch | 45 |
1 files changed, 45 insertions, 0 deletions
diff --git a/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch b/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch new file mode 100644 index 0000000000..ea1f0dd62b --- /dev/null +++ b/meta/recipes-devtools/binutils/binutils/CVE-2017-9748.patch | |||
@@ -0,0 +1,45 @@ | |||
1 | commit 63634bb4a107877dd08b6282e28e11cfd1a1649e | ||
2 | Author: Nick Clifton <nickc@redhat.com> | ||
3 | Date: Thu Jun 15 12:44:23 2017 +0100 | ||
4 | |||
5 | Avoid a possible compiler bug by using a static buffer instead of a stack local buffer. | ||
6 | |||
7 | PR binutils/21582 | ||
8 | * ieee.c (ieee_object_p): Use a static buffer to avoid compiler | ||
9 | bugs. | ||
10 | |||
11 | Upstream-Status: Backport | ||
12 | |||
13 | CVE: CVE-2017-9748 | ||
14 | Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com> | ||
15 | |||
16 | Index: git/bfd/ieee.c | ||
17 | =================================================================== | ||
18 | --- git.orig/bfd/ieee.c 2017-09-21 13:53:50.891154141 +0530 | ||
19 | +++ git/bfd/ieee.c 2017-09-21 13:54:00.715232229 +0530 | ||
20 | @@ -1871,7 +1871,7 @@ | ||
21 | char *processor; | ||
22 | unsigned int part; | ||
23 | ieee_data_type *ieee; | ||
24 | - unsigned char buffer[300]; | ||
25 | + static unsigned char buffer[300]; | ||
26 | ieee_data_type *save = IEEE_DATA (abfd); | ||
27 | bfd_size_type amt; | ||
28 | |||
29 | Index: git/bfd/ChangeLog | ||
30 | =================================================================== | ||
31 | --- git.orig/bfd/ChangeLog 2017-09-21 13:54:00.483230385 +0530 | ||
32 | +++ git/bfd/ChangeLog 2017-09-21 13:57:44.885008549 +0530 | ||
33 | @@ -73,6 +73,12 @@ | ||
34 | (evax_bfd_print_egsd): Check for an overlarge record length. | ||
35 | (evax_bfd_print_etir): Likewise. | ||
36 | |||
37 | +2017-06-15 Nick Clifton <nickc@redhat.com> | ||
38 | + | ||
39 | + PR binutils/21582 | ||
40 | + * ieee.c (ieee_object_p): Use a static buffer to avoid compiler | ||
41 | + bugs. | ||
42 | + | ||
43 | 2017-04-29 Alan Modra <amodra@gmail.com> | ||
44 | |||
45 | PR 21432 | ||