[Bug binutils/30267] Report a solved crash. In binutils-2_26_1 of the c++flit, heap buffer overflow in demangle_prefix() at cplus-dem.c:2744.

[nickc at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=30267

Nick Clifton <nickc at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
                 CC|                            |nickc at redhat dot com
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #1 from Nick Clifton <nickc at redhat dot com> ---
(In reply to 烽征战 from comment #0)
Hi,

> When I was in the process of comparing experiments on the program for
> fuzzing. I find a heap buffer overflow in the version binutils-2_26_1 of
> c++flit at function demangle_prefix in cplus-dem.c:2744. But this crash has
> been fixed in the binutils-2_40 version. However, I still feel that I should
> report this to you, so I apologize for taking up your time.

Thank you for taking the time to report this issue.

Since the bug has already been fixed, I am going to close this PR,
but I do not want to discourage you from filing other bug reports
in the future.  As a general rule we normally only fix bugs that 
exist in the current development sources, or the sources of the 
last two releases.  (So 2.40 and/or 2.39 in this case).

Many Linux and BSD distributions however do use older versions of the
binutils in their releases, and so you may find that reporting the
bug to them will result in action on their part.

Cheers
  Nick

-- 
You are receiving this mail because:
You are on the CC list for the bug.