2011-02-28 Michael Snyder <msnyder@vmware.com>

	* coffread.c (coff_getfilename): Add check to avoid overflow.

diff --git a/gdb/ChangeLog b/gdb/ChangeLog
index b1b8bf9..557f89f 100644 (file)
--- a/gdb/ChangeLog
+++ b/gdb/ChangeLog
@@ -1,5 +1,7 @@
 2011-02-28  Michael Snyder  <msnyder@vmware.com>
 
+       * coffread.c (coff_getfilename): Add check to avoid overflow.
+
        * objc-lang.c (selectors_info): Add a small safety margin to 
        avoid overflow.
        (classes_info): Error out on too long REGEXP.

diff --git a/gdb/coffread.c b/gdb/coffread.c
index 1566611..9df775d 100644 (file)
--- a/gdb/coffread.c
+++ b/gdb/coffread.c
@@ -1316,7 +1316,11 @@ coff_getfilename (union internal_auxent *aux_entry)
   char *result;
 
   if (aux_entry->x_file.x_n.x_zeroes == 0)
-    strcpy (buffer, stringtab + aux_entry->x_file.x_n.x_offset);
+    {
+      if (strlen (stringtab + aux_entry->x_file.x_n.x_offset) >= BUFSIZ)
+       internal_error (__FILE__, __LINE__, _("coff file name too long"));
+      strcpy (buffer, stringtab + aux_entry->x_file.x_n.x_offset);
+    }
   else
     {
       strncpy (buffer, aux_entry->x_file.x_fname, FILNMLEN);