CVS commit: [netbsd-4] src/gnu/dist/binutils/bfd

[Julian Coleman <jdc%netbsd.org@localhost>]

Module Name:    src
Committed By:   jdc
Date:           Mon Jun 23 06:37:23 UTC 2008

Modified Files:
        src/gnu/dist/binutils/bfd [netbsd-4]: tekhex.c

Log Message:
Pull up revision 1.2 (requested by adrianp in ticket #1160).

Fix for PR #33551 (a.k.a CVE-2006-2362)

Back port from the binutils CVS tree

Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation
GNU Binutils before 20060423, as used by GNU strings, allows context-dependent
attackers to cause a denial of service (application crash) and possibly
execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex)
record in which the length character is not a valid hexadecimal character.


To generate a diff of this commit:
cvs rdiff -r1.1.1.3 -r1.1.1.3.4.1 src/gnu/dist/binutils/bfd/tekhex.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.