Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 31 Aug 2012 18:00:53 -0700
From:      Garrett Cooper <yanegomi@gmail.com>
To:        Dimitry Andric <dim@freebsd.org>
Cc:        svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org
Subject:   Re: svn commit: r239962 - head/contrib/binutils/binutils
Message-ID:  <CAGH67wS=5-oWRWwBS9UVg4N6GCmmx3kVJku6Cy6NZmEbF1W3Pg@mail.gmail.com>
In-Reply-To: <201208312328.q7VNSfLK012047@svn.freebsd.org>
References:  <201208312328.q7VNSfLK012047@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Aug 31, 2012 at 4:28 PM, Dimitry Andric <dim@freebsd.org> wrote:
> Author: dim
> Date: Fri Aug 31 23:28:41 2012
> New Revision: 239962
> URL: http://svn.freebsd.org/changeset/base/239962
>
> Log:
>   Fix a twelve year old bug in readelf: when process_dynamic_segment()
>   encounters a DT_RUNPATH entry, the global dynamic_info[] array is
>   overrun, causing some other global variable to be overwritten.
>
>   In my testcase, this was the section_headers variable, leading to
>   segfaults or jemalloc assertions when it was freed later on.
>
>   Thanks to Koop Mast for providing samples of a few "bad" .so files.

...

    Nice! Hopefully this fixes the random tinderbox crashes I've seen!
Has this been fixed upstream?
Thanks!
-Garrett



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAGH67wS=5-oWRWwBS9UVg4N6GCmmx3kVJku6Cy6NZmEbF1W3Pg>