PR/28694 CVS commit: pkgsrc/devel/binutils

["Frederic Cambus" <fcambus%netbsd.org@localhost>]

The following reply was made to PR pkg/28694; it has been noted by GNATS.

From: "Frederic Cambus" <fcambus%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/28694 CVS commit: pkgsrc/devel/binutils
Date: Fri, 14 Jan 2022 08:35:59 +0000

 Module Name:	pkgsrc
 Committed By:	fcambus
 Date:		Fri Jan 14 08:35:59 UTC 2022
 
 Modified Files:
 	pkgsrc/devel/binutils: Makefile distinfo
 Added Files:
 	pkgsrc/devel/binutils/patches: patch-binutils_stabs.c
 
 Log Message:
 binutils: add upstream fixes for CVE-2021-45078.
 
 From upstream commit log:
 
 PR28694, Out-of-bounds write in stab_xcoff_builtin_type
 
 PR 28694
 * stabs.c (stab_xcoff_builtin_type): Make typenum unsigned.
 Negate typenum earlier, simplifying bounds checking.  Correct
 off-by-one indexing.  Adjust switch cases.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.100 -r1.101 pkgsrc/devel/binutils/Makefile
 cvs rdiff -u -r1.44 -r1.45 pkgsrc/devel/binutils/distinfo
 cvs rdiff -u -r0 -r1.1 pkgsrc/devel/binutils/patches/patch-binutils_stabs.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.