[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-17 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #13 from cvs-commit at gcc dot gnu.org --- This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "gdb and binutils". The branch

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-06 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 Nick Clifton changed: What|Removed |Added Status|ASSIGNED|RESOLVED Resolution|---

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-05 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #11 from Alexander Cherepanov --- I've tried the patch from PR 17522. It fixes this issue too. -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binut

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-05 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #10 from Nick Clifton --- Hi Alexander, I have uploaded a possible patch to address the directory traversal issue. (This is the same patch as the one posted to PR 17552). Please try it out and let me know if you are happy with

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-05 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #9 from Nick Clifton --- Created attachment 7902 --> https://sourceware.org/bugzilla/attachment.cgi?id=7902&action=edit Proposed patch -- You are receiving this mail because: You are on the CC list for the bug. ___

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #8 from Alexander Cherepanov --- See also bug #17552. -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binutils mailing list bug-binutils@gnu.org htt

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #7 from Alexander Cherepanov --- The danger is in overwriting sensitive files (e.g. authorized_keys) by an unconscious user or by an automatic process while extracting the contents of an archive. For similar examples please see htt

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #6 from Nick Clifton --- Hi Alexander, > I have another one for you -- directory traversal: > > $ printf '!\n%-48s%-10d`\n../file\n%-48s%-10s`\n' '//' 8 '/0' 0 > test.a > $ ar xv test.a > x - ../file What is the problem with thi

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #4 from Alexander Cherepanov --- Thanks, head works for now. I have another one for you -- directory traversal: $ printf '!\n%-48s%-10d`\n../file\n%-48s%-10s`\n' '//' 8 '/0' 0 > test.a $ ar xv test.a x - ../file -- You are rece

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #5 from Alexander Cherepanov --- s/head works for now/head works for me now/ -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binutils mailing list b

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 Nick Clifton changed: What|Removed |Added Status|NEW |ASSIGNED --- Comment #3 from Nick Clif

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread nickc at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 Nick Clifton changed: What|Removed |Added CC||nickc at redhat dot com --- Comment #2

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-04 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 --- Comment #1 from cvs-commit at gcc dot gnu.org --- This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "gdb and binutils". The branch,

[Bug binutils/17533] objdump/ar/... crash on malformed ar file

2014-11-03 Thread hanno at hboeck dot de
https://sourceware.org/bugzilla/show_bug.cgi?id=17533 Hanno Boeck changed: What|Removed |Added CC||hanno at hboeck dot de -- You are rece