Landing: e375c6e25f1a
Project / Subsystem
binutils / libctf
Date
2026-07-16
Author
Alan Modra <amodra@sourceware.org>
Commit
e375c6e25f1a024c5573982f36b64f2bec57449e
Source
public_inbox
Perf win
No
Breaking
No
All attributes
- project
- binutils
- subsystem
- libctf
- patch_id
- —
- commit_hash
- e375c6e25f1a024c5573982f36b64f2bec57449e
- source_type
- public_inbox
- headline
- libctf: Bounds-check forward ctt_type before indexing pop[]
- tldr
- Fixes a stack buffer overflow in libctf by validating CTT types before array indexing.
- author
- Alan Modra <amodra@sourceware.org>
- outcome
- committed
- performance_win
- false
- breaking_change
- false
- series_id
- —
- series_parts
- []
- tags
-
- • binutils
- • libctf
- • security
- • vulnerability
- discussion_id_link
- —
- bugzilla_pr
- —
- date
- 2026-07-16T00:00:00.000Z
A security vulnerability in libctf, which could lead to a stack buffer overflow, has been fixed. The issue arose from improperly validated ctt_type values in CTF_K_FORWARD records, which were used to index the pop[] array. The fix ensures that ctt_type is within the valid range before indexing, preventing out-of-bounds writes and returning an ECTF_CORRUPT error for invalid types.