This is the mail archive of the gdb-prs@sourceware.org mailing list for the GDB project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug gdb/15509] New: GDB does not sane check the pathname for a Fopen request from the remote target


http://sourceware.org/bugzilla/show_bug.cgi?id=15509

             Bug #: 15509
           Summary: GDB does not sane check the pathname for a Fopen
                    request from the remote target
           Product: gdb
           Version: HEAD
            Status: NEW
          Severity: normal
          Priority: P2
         Component: gdb
        AssignedTo: unassigned@sourceware.org
        ReportedBy: luis_gustavo@mentor.com
    Classification: Unclassified


At the present moment, GDB does not do a sanity check on the size of the string
the denotes the pathname to be opened via a remote Fopen packet.

This can lead GDB to allocate a great amount of memory (via alloca) and
potentially crash.

The function responsible for this is remote-fileio.c:remote_fileio_func_open ()

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]