| commit | b570b954bc5c1d6a6edb363c7bdba814bc1fd174 | [log] [tgz] |
|---|---|---|
| author | Alan Modra <amodra@gmail.com> | Tue Feb 25 12:48:43 2020 +1030 |
| committer | Alan Modra <amodra@gmail.com> | Wed Feb 26 10:37:13 2020 +1030 |
| tree | a7afa03ea8b4b9383264005d4f29413931a7468d | |
| parent | 24a15046c0ccc7fb7b95da1bb72fa66ad6bf6382 [diff] |
Limit bogus archive parsed_size Archive element size is given by data in the archive, and thus is subject to attack by fuzzers. The only harm this allows is allocation of huge amounts of memory, but some systems don't handle that well. So limit archive element size to archive file size. * bfdio.c (bfd_get_file_size): Ignore bogus archive element sizes.