Page MenuHomeFreeBSD
Differential D57810

link_elf: Unvalidated string‑table offset (link_elf_lookup_symbol1)
Needs ReviewPublic
Actions

Authored by thebugfixers_pm.me on Jun 24 2026, 9:08 AM.
Tags
None
Referenced Files
F170869686: D57810.diff
Mon, Sep 7, 4:09 AM
Unknown Object (File)
Sun, Sep 6, 1:45 PM
Unknown Object (File)
Sun, Sep 6, 9:30 AM
Unknown Object (File)
Sun, Sep 6, 1:49 AM
Unknown Object (File)
Sat, Sep 5, 1:14 AM
Unknown Object (File)
Fri, Sep 4, 4:45 PM
Unknown Object (File)
Fri, Sep 4, 4:44 PM
Unknown Object (File)
Fri, Sep 4, 1:44 PM
View All 50 Files
Subscribers
imp
olce

Details

Reviewers
None
Group Reviewers
Src Committers
Contributor Reviews (src)
Summary

st_name is never checked against ef->strsz

The existing test st_name == 0 only weeds out symbols that have no string; it does not stop a bogus, out-of-range offset from being used.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped

Revision Contents
Changeset List

PathSize
sys/
kern/
5 lines

Diff 180514

View Options

sys/kern/link_elf.c

Loading...