diff options
| author | dim <dim@FreeBSD.org> | 2012-08-31 23:28:41 +0000 |
|---|---|---|
| committer | dim <dim@FreeBSD.org> | 2012-08-31 23:28:41 +0000 |
| commit | 8c9e04b26729438492a4b9a4af9d08aec9b3a704 (patch) | |
| tree | 902db0c4e59ddda52c55b90f6a107ee4318088c8 /lib/libc/rpc/svc_auth_unix.c | |
| parent | 25568f4c4f0ab4414b84fd0631bc5e57c585c15f (diff) | |
| download | FreeBSD-src-8c9e04b26729438492a4b9a4af9d08aec9b3a704.zip FreeBSD-src-8c9e04b26729438492a4b9a4af9d08aec9b3a704.tar.gz | |
Fix a twelve year old bug in readelf: when process_dynamic_segment()
encounters a DT_RUNPATH entry, the global dynamic_info[] array is
overrun, causing some other global variable to be overwritten.
In my testcase, this was the section_headers variable, leading to
segfaults or jemalloc assertions when it was freed later on.
Thanks to Koop Mast for providing samples of a few "bad" .so files.
MFC after: 1 week
Diffstat (limited to 'lib/libc/rpc/svc_auth_unix.c')
0 files changed, 0 insertions, 0 deletions
