diff options
-rw-r--r-- | meta/recipes-devtools/binutils/binutils-2.27.inc | 1 | ||||
-rw-r--r-- | meta/recipes-devtools/binutils/binutils/CVE-2017-8397.patch | 50 |
2 files changed, 51 insertions, 0 deletions
diff --git a/meta/recipes-devtools/binutils/binutils-2.27.inc b/meta/recipes-devtools/binutils/binutils-2.27.inc index ecb0cdf094..a5122c5d5c 100644 --- a/meta/recipes-devtools/binutils/binutils-2.27.inc +++ b/meta/recipes-devtools/binutils/binutils-2.27.inc | |||
@@ -69,6 +69,7 @@ SRC_URI = "\ | |||
69 | file://CVE-2017-7304.patch \ | 69 | file://CVE-2017-7304.patch \ |
70 | file://CVE-2017-8393.patch \ | 70 | file://CVE-2017-8393.patch \ |
71 | file://CVE-2017-8395.patch \ | 71 | file://CVE-2017-8395.patch \ |
72 | file://CVE-2017-8397.patch \ | ||
72 | " | 73 | " |
73 | S = "${WORKDIR}/git" | 74 | S = "${WORKDIR}/git" |
74 | 75 | ||
diff --git a/meta/recipes-devtools/binutils/binutils/CVE-2017-8397.patch b/meta/recipes-devtools/binutils/binutils/CVE-2017-8397.patch new file mode 100644 index 0000000000..f966c80c4e --- /dev/null +++ b/meta/recipes-devtools/binutils/binutils/CVE-2017-8397.patch | |||
@@ -0,0 +1,50 @@ | |||
1 | commit 04b31182bf3f8a1a76e995bdfaaaab4c009b9cb2 | ||
2 | Author: Nick Clifton <nickc@redhat.com> | ||
3 | Date: Wed Apr 26 16:30:22 2017 +0100 | ||
4 | |||
5 | Fix a seg-fault when processing a corrupt binary containing reloc(s) with negative addresses. | ||
6 | |||
7 | PR binutils/21434 | ||
8 | * reloc.c (bfd_perform_relocation): Check for a negative address | ||
9 | in the reloc. | ||
10 | |||
11 | Upstream-Status: Backport | ||
12 | |||
13 | CVE: CVE-2017-8397 | ||
14 | Signed-off-by: Thiruvadi Rajaraman <trajaraman@mvista.com> | ||
15 | |||
16 | |||
17 | |||
18 | Index: git/bfd/reloc.c | ||
19 | =================================================================== | ||
20 | --- git.orig/bfd/reloc.c 2017-09-04 18:06:00.651987605 +0530 | ||
21 | +++ git/bfd/reloc.c 2017-09-04 18:06:10.740066291 +0530 | ||
22 | @@ -623,7 +623,10 @@ | ||
23 | PR 17512: file: c146ab8b, 46dff27f, 38e53ebf. */ | ||
24 | octets = reloc_entry->address * bfd_octets_per_byte (abfd); | ||
25 | if (octets + bfd_get_reloc_size (howto) | ||
26 | - > bfd_get_section_limit_octets (abfd, input_section)) | ||
27 | + > bfd_get_section_limit_octets (abfd, input_section) | ||
28 | + /* Check for an overly large offset which | ||
29 | + masquerades as a negative value too. */ | ||
30 | + || (octets + bfd_get_reloc_size (howto) < bfd_get_reloc_size (howto))) | ||
31 | return bfd_reloc_outofrange; | ||
32 | |||
33 | /* Work out which section the relocation is targeted at and the | ||
34 | Index: git/bfd/ChangeLog | ||
35 | =================================================================== | ||
36 | --- git.orig/bfd/ChangeLog 2017-09-04 18:06:10.684065855 +0530 | ||
37 | +++ git/bfd/ChangeLog 2017-09-04 18:08:33.845183050 +0530 | ||
38 | @@ -75,6 +75,12 @@ | ||
39 | |||
40 | 2017-04-26 Nick Clifton <nickc@redhat.com> | ||
41 | |||
42 | + PR binutils/21434 | ||
43 | + * reloc.c (bfd_perform_relocation): Check for a negative address | ||
44 | + in the reloc. | ||
45 | + | ||
46 | +2017-04-26 Nick Clifton <nickc@redhat.com> | ||
47 | + | ||
48 | PR binutils/21431 | ||
49 | * compress.c (bfd_init_section_compress_status): Check the return | ||
50 | value from bfd_malloc. | ||