]> Cypherpunks repositories - gostls13.git/commit
debug/macho: fail on invalid dynamic symbol table command
authorRoland Shoemaker <roland@golang.org>
Thu, 14 Oct 2021 20:02:01 +0000 (13:02 -0700)
committerRoland Shoemaker <roland@golang.org>
Thu, 28 Oct 2021 15:55:26 +0000 (15:55 +0000)
commit61536ec03063b4951163bd09609c86d82631fa27
tree4e1c7c30180505efd2f93390f8237b633c6603e2
parent278b9b3a4c7c01929133737e960335afa18eeec3
debug/macho: fail on invalid dynamic symbol table command

Fail out when loading a file that contains a dynamic symbol table
command that indicates a larger number of symbols than exist in the
loaded symbol table.

Thanks to Burak Çarıkçı - Yunus Yıldırım (CT-Zer0 Crypttech) for
reporting this issue.

Fixes #48990
Fixes CVE-2021-41771

Change-Id: Ic3d6e6529241afcc959544b326b21b663262bad5
Reviewed-on: https://go-review.googlesource.com/c/go/+/355990
Reviewed-by: Julie Qiu <julie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
Reviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>
Run-TryBot: Roland Shoemaker <roland@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Trust: Katie Hockman <katie@golang.org>
src/debug/macho/file.go
src/debug/macho/file_test.go
src/debug/macho/testdata/gcc-amd64-darwin-exec-with-bad-dysym.base64 [new file with mode: 0644]