diff options
Diffstat (limited to 'meta/recipes-devtools')
| -rw-r--r-- | meta/recipes-devtools/binutils/binutils-2.44.inc | 1 | ||||
| -rw-r--r-- | meta/recipes-devtools/binutils/binutils/0018-CVE-2025-5245.patch | 38 |
2 files changed, 39 insertions, 0 deletions
diff --git a/meta/recipes-devtools/binutils/binutils-2.44.inc b/meta/recipes-devtools/binutils/binutils-2.44.inc index 8855fa709a..0f0befe30e 100644 --- a/meta/recipes-devtools/binutils/binutils-2.44.inc +++ b/meta/recipes-devtools/binutils/binutils-2.44.inc | |||
| @@ -42,5 +42,6 @@ SRC_URI = "\ | |||
| 42 | file://0017-CVE-2025-1181-2.patch \ | 42 | file://0017-CVE-2025-1181-2.patch \ |
| 43 | file://0016-CVE-2025-5244.patch \ | 43 | file://0016-CVE-2025-5244.patch \ |
| 44 | file://0016-CVE-2025-3198.patch \ | 44 | file://0016-CVE-2025-3198.patch \ |
| 45 | file://0018-CVE-2025-5245.patch \ | ||
| 45 | " | 46 | " |
| 46 | S = "${WORKDIR}/git" | 47 | S = "${WORKDIR}/git" |
diff --git a/meta/recipes-devtools/binutils/binutils/0018-CVE-2025-5245.patch b/meta/recipes-devtools/binutils/binutils/0018-CVE-2025-5245.patch new file mode 100644 index 0000000000..d4b7d55966 --- /dev/null +++ b/meta/recipes-devtools/binutils/binutils/0018-CVE-2025-5245.patch | |||
| @@ -0,0 +1,38 @@ | |||
| 1 | From: Alan Modra <amodra@gmail.com> | ||
| 2 | Date: Tue, 1 Apr 2025 22:36:54 +1030 | ||
| 3 | |||
| 4 | PR32829, SEGV on objdump function debug_type_samep | ||
| 5 | u.kenum is always non-NULL, see debug_make_enum_type. | ||
| 6 | |||
| 7 | Upstream-Status: Backport [https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a] | ||
| 8 | CVE: CVE-2025-5245 | ||
| 9 | |||
| 10 | Signed-off-by: Deepesh Varatharajan <Deepesh.Varatharajan@windriver.com> | ||
| 11 | |||
| 12 | diff --git a/binutils/debug.c b/binutils/debug.c | ||
| 13 | index dcc8ccde..465b18e7 100644 | ||
| 14 | --- a/binutils/debug.c | ||
| 15 | +++ b/binutils/debug.c | ||
| 16 | @@ -2554,9 +2554,6 @@ debug_write_type (struct debug_handle *info, | ||
| 17 | case DEBUG_KIND_UNION_CLASS: | ||
| 18 | return debug_write_class_type (info, fns, fhandle, type, tag); | ||
| 19 | case DEBUG_KIND_ENUM: | ||
| 20 | - if (type->u.kenum == NULL) | ||
| 21 | - return (*fns->enum_type) (fhandle, tag, (const char **) NULL, | ||
| 22 | - (bfd_signed_vma *) NULL); | ||
| 23 | return (*fns->enum_type) (fhandle, tag, type->u.kenum->names, | ||
| 24 | type->u.kenum->values); | ||
| 25 | case DEBUG_KIND_POINTER: | ||
| 26 | @@ -3097,9 +3094,9 @@ debug_type_samep (struct debug_handle *info, struct debug_type_s *t1, | ||
| 27 | break; | ||
| 28 | |||
| 29 | case DEBUG_KIND_ENUM: | ||
| 30 | - if (t1->u.kenum == NULL) | ||
| 31 | - ret = t2->u.kenum == NULL; | ||
| 32 | - else if (t2->u.kenum == NULL) | ||
| 33 | + if (t1->u.kenum->names == NULL) | ||
| 34 | + ret = t2->u.kenum->names == NULL; | ||
| 35 | + else if (t2->u.kenum->names == NULL) | ||
| 36 | ret = false; | ||
| 37 | else | ||
| 38 | { | ||
