PR binutils/22875: FRV/ELF: Prevent an out-of-bounds howto table access

Prevent an out-of-bounds `elf32_frv_howto_table' table access in
`frv_info_to_howto_rela' by using the size of the table rather than
R_FRV_max to determine the number of entries in the contiguous regular
FRV relocation range defined and described in the table.

	bfd/
	* elf32-frv.c (frv_info_to_howto_rela): Correct the range check
	for `elf32_frv_howto_table' table access.
This commit is contained in:
Maciej W. Rozycki
2018-04-04 02:00:48 +01:00
parent 7ed6f92aaf
commit f428698edf
2 changed files with 7 additions and 1 deletions
+5
View File
@@ -1,3 +1,8 @@
2018-04-04 Maciej W. Rozycki <macro@mips.com>
* elf32-frv.c (frv_info_to_howto_rela): Correct the range check
for `elf32_frv_howto_table' table access.
2018-04-04 Maciej W. Rozycki <macro@mips.com>
* elf32-mips.c (mips_elf32_rtype_to_howto): Also return
+2 -1
View File
@@ -25,6 +25,7 @@
#include "elf/frv.h"
#include "dwarf2.h"
#include "hashtab.h"
#include "libiberty.h"
/* Forward declarations. */
@@ -2551,7 +2552,7 @@ frv_info_to_howto_rela (bfd *abfd ATTRIBUTE_UNUSED,
break;
default:
if (r_type >= (unsigned int) R_FRV_max)
if (r_type >= ARRAY_SIZE (elf32_frv_howto_table))
{
/* xgettext:c-format */
_bfd_error_handler (_("%pB: unsupported relocation type %#x"),