summaryrefslogtreecommitdiffstats
path: root/meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch
diff options
context:
space:
mode:
Diffstat (limited to 'meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch')
-rw-r--r--meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch37
1 files changed, 0 insertions, 37 deletions
diff --git a/meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch b/meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch
deleted file mode 100644
index 11ecb71b2e..0000000000
--- a/meta/recipes-devtools/binutils/binutils/CVE-2019-9077.patch
+++ /dev/null
@@ -1,37 +0,0 @@
1From f7bbc8890de45df6eda0ddef5dd04f835f54eecf Mon Sep 17 00:00:00 2001
2From: Nick Clifton <nickc@redhat.com>
3Date: Wed, 20 Feb 2019 17:03:47 +0000
4Subject: [PATCH] Fix a illegal memory access fault when parsing a corrupt MIPS
5 option section using readelf.
6
7 PR 24243
8 * readelf.c (process_mips_specific): Check for an options section
9 that is too small to even contain a single option.
10
11Upstream-Status: Backport [https://github.com/bminor/binutils-gdb/commit/7fc0c668f2aceb8582d74db1ad2528e2bba8a921]
12CVE: CVE-2019-9077
13Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
14---
15 binutils/readelf.c | 6 ++++++
16 1 file changed, 6 insertions(+)
17
18diff --git a/binutils/readelf.c b/binutils/readelf.c
19index 9df3742..18ab806 100644
20--- a/binutils/readelf.c
21+++ b/binutils/readelf.c
22@@ -16179,6 +16179,12 @@ process_mips_specific (Filedata * filedata)
23 error (_("No MIPS_OPTIONS header found\n"));
24 return FALSE;
25 }
26+ /* PR 24243 */
27+ if (sect->sh_size < sizeof (* eopt))
28+ {
29+ error (_("The MIPS options section is too small.\n"));
30+ return FALSE;
31+ }
32
33 eopt = (Elf_External_Options *) get_data (NULL, filedata, options_offset, 1,
34 sect->sh_size, _("options"));
35--
362.7.4
37