https://gcc.gnu.org/bugzilla/show_bug.cgi?id=120541

Xi Ruoyao <xry111 at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |xry111 at gcc dot gnu.org
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |DUPLICATE

--- Comment #3 from Xi Ruoyao <xry111 at gcc dot gnu.org> ---
Dup.  Please don't report issues with the same underlying reason again and
again.

> Triggered via c++filt -r, this crash results in denial of service and may 
> pose a risk in contexts where demangling occurs automatically (e.g., 
> debugging tools, CI/CD pipelines).

Quote from Binutils security policy:

Notes:
======

    None of the programs in the GNU Binutils suite need elevated
    privileges to operate and it is recommended that users do not use 
    them from accounts where such privileges are automatically
    available.

    The inspection tools are intended to be robust but nevertheless
    they should be appropriately sandboxed if they are used to examine
    malicious or potentially malicious input files.

thus this is NOT a security issue.

*** This bug has been marked as a duplicate of bug 114830 ***

Reply via email to