[PATCH] libelf: Add some ar header sanity checking.
mjw at redhat.com
Mon Dec 15 09:04:00 UTC 2014
On Thu, 2014-12-11 at 16:30 +0100, Mark Wielaard wrote:
> Don't allow entries or size to overflow the parent file size.
> +2014-12-11 Mark Wielaard <mjw at redhat.com>
> + * elf_begin.c (read_long_names): Check for offset overflow.
> + (__libelf_next_arhdr_wrlock): Likewise. Sanity check the ar_size.
> + Don't allow it to go beyond end of file.
I pushed this to master.
More information about the elfutils-devel