Page MenuHomeFreeBSD

link_elf: Uncapped dynamic-section walk (parse_dynamic)
Needs ReviewPublic

Authored by thebugfixers_pm.me on Jun 24 2026, 9:41 AM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Oct 7, 2:57 AM
Unknown Object (File)
Fri, Oct 2, 5:32 AM
Unknown Object (File)
Thu, Oct 1, 4:18 AM
Unknown Object (File)
Mon, Sep 28, 7:45 AM
Unknown Object (File)
Mon, Sep 21, 11:30 PM
Unknown Object (File)
Sep 9 2026, 1:27 PM
Unknown Object (File)
Sep 4 2026, 9:50 PM
Unknown Object (File)
Sep 2 2026, 2:06 PM
Subscribers

Details

Reviewers
None
Group Reviewers
Src Committers
Contributor Reviews (src)
Summary

There is no limit on how far this loop advances. If the PT_DYNAMIC segment is malformed and lacks a DT_NULL terminator within its bounds, the kernel scans forward indefinitely.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped