Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-11-23 05:09:43 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Fix #23581 - (again) another infinite loop in the dwarf parser ##crash

Browse Source
This commit is contained in:
pancake 2024-11-16 13:32:45 +01:00 committed by pancake
parent 21f9839ab0
commit 0a8deff545
1 changed files with 14 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
libr/bin/dwarf.c
View File

@ -779,7 +779,8 @@ static const ut8 *parse_line_header_source_dwarf5(RBin *bin, RBinFile *bf, const
buf += mylen + 1;
} else {
name = NULL;
buf++;
buf = NULL;
// buf++;
}
}
break;
@ -790,16 +791,18 @@ static const ut8 *parse_line_header_source_dwarf5(RBin *bin, RBinFile *bf, const
case DW_FORM_strp:
case DW_FORM_line_strp:
{
ut64 section_offset = dwarf_read_offset (hdr->is_64bit, &buf, buf_end, be);
RBinSection *section = (form_code == DW_FORM_strp)
? getsection (bin, DWARF_SN_STR)
: getsection (bin, DWARF_SN_LINE_STR);
name = get_section_string (bin, section, section_offset);
if (name) {
r_str_ansi_strip (name);
r_str_replace_ch (name, '\n', 0, true);
r_str_replace_ch (name, '\t', 0, true);
}
ut64 section_offset = dwarf_read_offset (hdr->is_64bit, &buf, buf_end, be);
RBinSection *section = (form_code == DW_FORM_strp)
? getsection (bin, DWARF_SN_STR)
: getsection (bin, DWARF_SN_LINE_STR);
name = get_section_string (bin, section, section_offset);
if (name) {
r_str_ansi_strip (name);
r_str_replace_ch (name, '\n', 0, true);
r_str_replace_ch (name, '\t', 0, true);
} else {
buf = NULL;
}
}
break;
case DW_FORM_data1: