This is the mail archive of the
gdb-prs@sourceware.org
mailing list for the GDB project.
[Bug gdb/15509] New: GDB does not sane check the pathname for a Fopen request from the remote target
- From: "luis_gustavo at mentor dot com" <sourceware-bugzilla at sourceware dot org>
- To: gdb-prs at sourceware dot org
- Date: Tue, 21 May 2013 15:22:57 +0000
- Subject: [Bug gdb/15509] New: GDB does not sane check the pathname for a Fopen request from the remote target
- Auto-submitted: auto-generated
http://sourceware.org/bugzilla/show_bug.cgi?id=15509
Bug #: 15509
Summary: GDB does not sane check the pathname for a Fopen
request from the remote target
Product: gdb
Version: HEAD
Status: NEW
Severity: normal
Priority: P2
Component: gdb
AssignedTo: unassigned@sourceware.org
ReportedBy: luis_gustavo@mentor.com
Classification: Unclassified
At the present moment, GDB does not do a sanity check on the size of the string
the denotes the pathname to be opened via a remote Fopen packet.
This can lead GDB to allocate a great amount of memory (via alloca) and
potentially crash.
The function responsible for this is remote-fileio.c:remote_fileio_func_open ()
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.