Date: Fri, 31 Aug 2012 18:00:53 -0700 From: Garrett Cooper <yanegomi@gmail.com> To: Dimitry Andric <dim@freebsd.org> Cc: svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org Subject: Re: svn commit: r239962 - head/contrib/binutils/binutils Message-ID: <CAGH67wS=5-oWRWwBS9UVg4N6GCmmx3kVJku6Cy6NZmEbF1W3Pg@mail.gmail.com> In-Reply-To: <201208312328.q7VNSfLK012047@svn.freebsd.org> References: <201208312328.q7VNSfLK012047@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 31, 2012 at 4:28 PM, Dimitry Andric <dim@freebsd.org> wrote: > Author: dim > Date: Fri Aug 31 23:28:41 2012 > New Revision: 239962 > URL: http://svn.freebsd.org/changeset/base/239962 > > Log: > Fix a twelve year old bug in readelf: when process_dynamic_segment() > encounters a DT_RUNPATH entry, the global dynamic_info[] array is > overrun, causing some other global variable to be overwritten. > > In my testcase, this was the section_headers variable, leading to > segfaults or jemalloc assertions when it was freed later on. > > Thanks to Koop Mast for providing samples of a few "bad" .so files. ... Nice! Hopefully this fixes the random tinderbox crashes I've seen! Has this been fixed upstream? Thanks! -Garrett
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAGH67wS=5-oWRWwBS9UVg4N6GCmmx3kVJku6Cy6NZmEbF1W3Pg>