mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
4dc951f3ee
This fixes a memory leaks that affects both binutils 2.43 and 2.44, see https://www.cve.org/CVERecord?id=CVE-2025-3198 Fixes the following CVE: - CVE-2025-3198: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>
32 lines
803 B
Diff
32 lines
803 B
Diff
From ba6ad3a18cb26b79e0e3b84c39f707535bbc344d Mon Sep 17 00:00:00 2001
|
||
From: Alan Modra <amodra@gmail.com>
|
||
Date: Wed, 19 Feb 2025 07:58:54 +1030
|
||
Subject: [PATCH] PR32716, objdump -i memory leak
|
||
|
||
PR binutils/32716
|
||
* bucomm.c (display_info): Free arg.info.
|
||
|
||
Upstream: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d
|
||
|
||
CVE: CVE-2025-3198
|
||
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
|
||
---
|
||
binutils/bucomm.c | 1 +
|
||
1 file changed, 1 insertion(+)
|
||
|
||
diff --git a/binutils/bucomm.c b/binutils/bucomm.c
|
||
index ccf54099154..d4554737db1 100644
|
||
--- a/binutils/bucomm.c
|
||
+++ b/binutils/bucomm.c
|
||
@@ -435,6 +435,7 @@ display_info (void)
|
||
if (!arg.error)
|
||
display_target_tables (&arg);
|
||
|
||
+ free (arg.info);
|
||
return arg.error;
|
||
}
|
||
|
||
--
|
||
2.43.5
|
||
|