link_elf: Unvalidated string‑table offset (link_elf_lookup_symbol1)
Needs ReviewPublic
Actions

Authored by thebugfixers_pm.me on Jun 24 2026, 9:08 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Thu, Oct 1, 5:04 AM

	Unknown Object (File)
	Tue, Sep 29, 7:26 AM

	Unknown Object (File)
	Fri, Sep 25, 10:08 AM

	Unknown Object (File)
	Fri, Sep 11, 7:12 PM

	Unknown Object (File)
	Thu, Sep 10, 10:30 PM

	Unknown Object (File)
	Thu, Sep 10, 8:50 PM

	Unknown Object (File)
	Sep 9 2026, 1:04 PM

	Unknown Object (File)
	Sep 8 2026, 4:37 PM

View All 59 Files

Subscribers

imp

olce

Details

Reviewers

None

Group Reviewers

Src Committers
Contributor Reviews (src)

Summary

st_name is never checked against ef->strsz

The existing test st_name == 0 only weeds out symbols that have no string; it does not stop a bogus, out-of-range offset from being used.

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

thebugfixers_pm.me created this revision.Jun 24 2026, 9:08 AM

Herald added subscribers: olce, imp. · View Herald TranscriptJun 24 2026, 9:08 AM

thebugfixers_pm.me requested review of this revision.Jun 24 2026, 9:08 AM

thebugfixers_pm.me added a parent revision: D57785: link_elf: Guard against subtraction underflow.Jun 26 2026, 5:25 PM

Revision Contents
Changeset List

Path

Size

sys/

kern/

link_elf.c

5 lines

Diff 180514

View Options

link_elf: Unvalidated string‑table offset (link_elf_lookup_symbol1)Needs ReviewPublicActions