From: Nick Clifton <nickc@redhat.com>
Date: Tue, 11 Nov 2014 16:15:47 +0000 (+0000)
Subject: Prevent a buffer overrun whilst displaying corrupt ARM tags.
X-Git-Tag: hjl/linux/release/2.25.51.0.1~3^2~42^2~42
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=541a3cbda9de8ae8888906cfe14887c394a3f772;p=thirdparty%2Fbinutils-gdb.git

Prevent a buffer overrun whilst displaying corrupt ARM tags.

	PR binutils/17531
	* readelf.c (display_arm_attribute): Avoid reading off the end of
	the buffer when processing a Tag_nodefaults.
---

diff --git a/binutils/ChangeLog b/binutils/ChangeLog
index 2e71311f49a..f7a58a88a0b 100644
--- a/binutils/ChangeLog
+++ b/binutils/ChangeLog
@@ -1,3 +1,9 @@
+2014-11-11  Nick Clifton  <nickc@redhat.com>
+
+	PR binutils/17531
+	* readelf.c (display_arm_attribute): Avoid reading off the end of
+	the buffer when processing a Tag_nodefaults.
+
 2014-11-10  Nick Clifton  <nickc@redhat.com>
 
 	PR binutils/17531
diff --git a/binutils/readelf.c b/binutils/readelf.c
index 91d55815658..083096090e9 100644
--- a/binutils/readelf.c
+++ b/binutils/readelf.c
@@ -12054,7 +12054,9 @@ display_arm_attribute (unsigned char * p,
 	      break;
 
 	    case 64: /* Tag_nodefaults.  */
-	      p++;
+	      /* PR 17531: file: 001-505008-0.01.  */
+	      if (p < end)
+		p++;
 	      printf (_("True\n"));
 	      break;