PR/26574 CVS commit: pkgsrc/devel/binutils

["Frederic Cambus" <fcambus%netbsd.org@localhost>]

The following reply was made to PR pkg/26574; it has been noted by GNATS.

From: "Frederic Cambus" <fcambus%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/26574 CVS commit: pkgsrc/devel/binutils
Date: Thu, 7 Jan 2021 09:47:48 +0000

 Module Name:	pkgsrc
 Committed By:	fcambus
 Date:		Thu Jan  7 09:47:48 UTC 2021
 
 Modified Files:
 	pkgsrc/devel/binutils: Makefile distinfo
 Added Files:
 	pkgsrc/devel/binutils/patches: patch-bfd_elf.c patch-bfd_elfcode.h
 
 Log Message:
 binutils: add upstream fixes for CVE-2020-35448.
 
 From upstream commit log:
 
 PR26574, heap buffer overflow in _bfd_elf_slurp_secondary_reloc_section
 
 A horribly fuzzed object with section headers inside the ELF header.
 Disallow that, and crazy reloc sizes.
 
 	PR 26574
 	* elfcode.h (elf_object_p): Sanity check section header offset.
 	* elf.c (_bfd_elf_slurp_secondary_reloc_section): Sanity check
 	sh_entsize.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.93 -r1.94 pkgsrc/devel/binutils/Makefile
 cvs rdiff -u -r1.38 -r1.39 pkgsrc/devel/binutils/distinfo
 cvs rdiff -u -r0 -r1.1 pkgsrc/devel/binutils/patches/patch-bfd_elf.c \
     pkgsrc/devel/binutils/patches/patch-bfd_elfcode.h
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.