Page MenuHomeFreeBSD
Differential D57810

link_elf: Unvalidated string‑table offset (link_elf_lookup_symbol1)
Needs ReviewPublic
Actions

Authored by thebugfixers_pm.me on Jun 24 2026, 9:08 AM.
Tags
None
Referenced Files
F165290958: D57810.diff
Fri, Aug 7, 11:10 AM
Unknown Object (File)
Thu, Aug 6, 10:05 PM
Unknown Object (File)
Sat, Aug 1, 6:00 AM
Unknown Object (File)
Mon, Jul 27, 9:26 PM
Unknown Object (File)
Sun, Jul 26, 6:07 AM
Unknown Object (File)
Sat, Jul 25, 11:26 AM
Unknown Object (File)
Thu, Jul 16, 4:19 AM
Unknown Object (File)
Jul 6 2026, 2:05 PM
View All 15 Files
Subscribers
imp
olce

Details

Reviewers
None
Group Reviewers
Src Committers
Contributor Reviews (src)
Summary

st_name is never checked against ef->strsz

The existing test st_name == 0 only weeds out symbols that have no string; it does not stop a bogus, out-of-range offset from being used.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Revision Contents
Changeset List

PathSize
sys/
kern/
5 lines

Diff 180514

View Options

sys/kern/link_elf.c

Loading...