[PATCH] libelf: Add some ar header sanity checking.

Mark Wielaard mjw at redhat.com
Mon Dec 15 09:04:00 UTC 2014


On Thu, 2014-12-11 at 16:30 +0100, Mark Wielaard wrote:
> Don't allow entries or size to overflow the parent file size.
>
> +2014-12-11  Mark Wielaard  <mjw at redhat.com>
> +
> +	* elf_begin.c (read_long_names): Check for offset overflow.
> +	(__libelf_next_arhdr_wrlock): Likewise. Sanity check the ar_size.
> +	Don't allow it to go beyond end of file.

I pushed this to master.


More information about the elfutils-devel mailing list