Titouan Christophe
4dc951f3ee
This fixes a memory leaks that affects both binutils 2.43 and 2.44, see https://www.cve.org/CVERecord?id=CVE-2025-3198 Fixes the following CVE: - CVE-2025-3198: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>
32 lines
803 B
Diff
32 lines
803 B
Diff
From ba6ad3a18cb26b79e0e3b84c39f707535bbc344d Mon Sep 17 00:00:00 2001
|
|
From: Alan Modra <amodra@gmail.com>
|
|
Date: Wed, 19 Feb 2025 07:58:54 +1030
|
|
Subject: [PATCH] PR32716, objdump -i memory leak
|
|
|
|
PR binutils/32716
|
|
* bucomm.c (display_info): Free arg.info.
|
|
|
|
Upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d
|
|
|
|
CVE: CVE-2025-3198
|
|
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
|
|
---
|
|
binutils/bucomm.c | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
diff --git a/binutils/bucomm.c b/binutils/bucomm.c
|
|
index ccf54099154..d4554737db1 100644
|
|
--- a/binutils/bucomm.c
|
|
+++ b/binutils/bucomm.c
|
|
@@ -435,6 +435,7 @@ display_info (void)
|
|
if (!arg.error)
|
|
display_target_tables (&arg);
|
|
|
|
+ free (arg.info);
|
|
return arg.error;
|
|
}
|
|
|
|
--
|
|
2.43.5
|
|
|