Landing: 283b2f9e4d4e

Project / Subsystem

binutils / bfd

Date

2026-08-27

Author

Alan Modra <amodra@sourceware.org>

Commit

283b2f9e4d4e236ba7d7142285c113f0602cf393

Source

public_inbox

Perf win

No

Breaking

No

All attributes

project
binutils
subsystem
bfd
patch_id
—
commit_hash
283b2f9e4d4e236ba7d7142285c113f0602cf393
source_type
public_inbox
headline
Fix double free in _bfd_stab_section_find_nearest_line
tldr
Corrects a double-free bug in BFD's stab section handling by nullifying freed memory and adjusting error paths.
author
Alan Modra <amodra@sourceware.org>
outcome
committed
performance_win
false
breaking_change
false
series_id
—
series_parts
[]
tags
  • • bugfix
  • • memory-safety
  • • bfd
discussion_id_link
—
bugzilla_pr
—
date
2026-08-27T00:00:00.000Z

This commit fixes a double-free vulnerability in the _bfd_stab_section_find_nearest_line function within BFD’s symbol handling. It ensures that memory pointed to by reloc_vector is set to NULL after being freed, preventing subsequent attempts to free the same memory. Additionally, it corrects an error goto path to prevent the issue from occurring even in cases of incorrect control flow.