diff options
| author | Andreas Schwab <schwab@suse.de> | 2018-10-23 09:40:14 +0200 |
|---|---|---|
| committer | Andreas Schwab <schwab@suse.de> | 2018-10-24 16:34:02 +0200 |
| commit | 2954daf00bb4dc27c69a48e6798d5960ea320741 (patch) | |
| tree | 1515d3e310cfb3fc2e2547bcaea0c0a8fb3cac01 /elf/cache.c | |
| parent | a27a4f4721837a5fb36ace833764b06a64c5af1c (diff) | |
| download | glibc-2954daf00bb4dc27c69a48e6798d5960ea320741.tar.gz glibc-2954daf00bb4dc27c69a48e6798d5960ea320741.tar.xz glibc-2954daf00bb4dc27c69a48e6798d5960ea320741.zip | |
Add more checks for valid ld.so.cache file (bug 18093)
Diffstat (limited to 'elf/cache.c')
| -rw-r--r-- | elf/cache.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/elf/cache.c b/elf/cache.c index e63979da7d..c4cd825c30 100644 --- a/elf/cache.c +++ b/elf/cache.c @@ -199,6 +199,11 @@ print_cache (const char *cache_name) } else { + /* Check for corruption, avoiding overflow. */ + if ((cache_size - sizeof (struct cache_file)) / sizeof (struct file_entry) + < cache->nlibs) + error (EXIT_FAILURE, 0, _("File is not a cache file.\n")); + size_t offset = ALIGN_CACHE (sizeof (struct cache_file) + (cache->nlibs * sizeof (struct file_entry))); |