[PATCH] sparc_attrs.c: Prevent buffer overflow in sparc_check_object_attribute

2024-11-05 Thread Anton Moryakov
first report of the static analyzer: A string is copied into the buffer 's' of size 577 without checking its length first at sparc_attrs.c:95. Corrections explained: Record Length Limit: We use strncat to add a line indicating the available remaining_size. This prevents writing beyond the alloc

Re: [PATCH] sparc_attrs.c: Prevent buffer overflow in sparc_check_object_attribute

2024-11-05 Thread Serhei Makarov
On Tue, Nov 5, 2024, at 9:25 AM, Anton Moryakov wrote: > Record Length Limit: We use strncat to add a line indicating the > available remaining_size. This prevents writing beyond the allocated > memory. > Remaining space update: remaining_size is updated after each entry to > ensure that row

Re: [PATCH] sparc_attrs.c: Prevent buffer overflow in sparc_check_object_attribute

2024-11-05 Thread Mark Wielaard
Hi, On Tue, Nov 05, 2024 at 11:58:19AM -0500, Serhei Makarov wrote: > On Tue, Nov 5, 2024, at 9:25 AM, Anton Moryakov wrote: > > Record Length Limit: We use strncat to add a line indicating the > > available remaining_size. This prevents writing beyond the allocated > > memory. > > Remaining spa

[PATCH] Обновить patches/0001-sparc_attrs.c-Prevent-buffer-overflow-in-sparc_check.patch

2024-11-05 Thread Anton Moryakov
From: Моряков, Антон --- elfutils/backends/sparc_attrs.c | 5 - ...c_attrs.c-Prevent-buffer-overflow-in-sparc_check.patch | 8 2 files changed, 8 insertions(+), 5 deletions(-) diff --git a/elfutils/backends/sparc_attrs.c b/elfutils/backends/sparc_attrs.c i

[Bug tools/32253] FAIL: run-strip-reloc-self.sh with binutils master

2024-11-05 Thread amerey at redhat dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=32253 Aaron Merey changed: What|Removed |Added See Also||https://sourceware.org/bugz

[PATCH] strip: Ignore --reloc-debug-sections-only for non-ET_REL files.

2024-11-05 Thread Aaron Merey
strip --reloc-debug-sections-only is expected to be a no-op for non-ET_REL files. This was not enforced in the code. Sections were copied over to a new output file and normally its contents would be identical to the input file. However the output file is not identical to a non-ET_REL input file

[Bug libelf/32311] elf_compress_gnu.c: gcc warns null-dereference with lto

2024-11-05 Thread mark at klomp dot org
https://sourceware.org/bugzilla/show_bug.cgi?id=32311 Mark Wielaard changed: What|Removed |Added Status|UNCONFIRMED |ASSIGNED Assignee|unassigne