PR/33551 CVS commit: [netbsd-3-0] src/gnu/dist/binutils/bfd

[Geert Hendrickx <ghen%netbsd.org@localhost>]

The following reply was made to PR bin/33551; it has been noted by GNATS.

From: Geert Hendrickx <ghen%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/33551 CVS commit: [netbsd-3-0] src/gnu/dist/binutils/bfd
Date: Mon, 23 Jun 2008 10:39:34 +0000 (UTC)

 Module Name:   src
 Committed By:  ghen
 Date:          Mon Jun 23 10:39:34 UTC 2008
 
 Modified Files:
        src/gnu/dist/binutils/bfd [netbsd-3-0]: tekhex.c
 
 Log Message:
 Pull up following revision(s) (requested by adrianp in ticket #1941):
        gnu/dist/binutils/bfd/tekhex.c: revision 1.2 via patch
 Fix for PR #33551 (a.k.a CVE-2006-2362)
 Back port from the binutils CVS tree
 Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation
 GNU Binutils before 20060423, as used by GNU strings, allows context-dependent
 attackers to cause a denial of service (application crash) and possibly
 execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex)
 record in which the length character is not a valid hexadecimal character.
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.1.1.2 -r1.1.1.2.4.1 src/gnu/dist/binutils/bfd/tekhex.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.