PR 29482 buffer overflow

← All discussions

Project / Subsystem

binutils / binutils

Date

2026-09-13

Proposer

Alan Modra <amodra@gmail.com>

Source type

public_inbox

Consensus

Proposed

Sentiment

—/10

Technical tradeoffs

• Enhances security by preventing potential overflows.

View thread →

All attributes

project: binutils
subsystem: binutils
patch_id: —
discussion_id: aqYuGveSLmFJuNMH@squeak.grove.modra.org
source_type: public_inbox
title: PR 29482 buffer overflow
headline: PR 29482 buffer overflow
tldr: Fix buffer overflow in _bfd_ecoff_set_section_contents by adding sanity checks.
proposer: Alan Modra <amodra@gmail.com>
consensus: Proposed
outcome: proposed
sentiment_score: —
technical_tradeoffs: • Enhances security by preventing potential overflows.
series_id: —
series_role: standalone
series_parts: []
tags: • security
• bfd
• buffer overflow
url: https://inbox.sourceware.org/binutils/aqYuGveSLmFJuNMH@squeak.grove.modra.org
bugzilla_url: —
date: 2026-09-13T00:00:00.000Z

PR 29482 buffer overflow

This patch addresses a buffer overflow vulnerability in _bfd_ecoff_set_section_contents by introducing the same safety checks present in coff_set_section_contents. The vulnerability was missed in a previous commit. The fix involves rewriting the sanity check to avoid run-time division.