diff options
| author | Jonas Devlieghere <jonas@devlieghere.com> | 2017-09-13 13:43:01 +0000 |
|---|---|---|
| committer | Jonas Devlieghere <jonas@devlieghere.com> | 2017-09-13 13:43:01 +0000 |
| commit | 81f5abe1add34519bcede582b6b1ca3d6ed895c1 (patch) | |
| tree | fafd5e04f6b0f426ce622f12d4cafb92dd176246 /llvm/test/Object | |
| parent | 35f4d7ca463903b3c12c1a00cdd1badb9ef2ca08 (diff) | |
| download | bcm5719-llvm-81f5abe1add34519bcede582b6b1ca3d6ed895c1.tar.gz bcm5719-llvm-81f5abe1add34519bcede582b6b1ca3d6ed895c1.zip | |
[MachO] Prevent heap overflow when load command extends past EOF
This patch fixes a heap-buffer-overflow when a malformed Mach-O has a
load command who's size extends past the end of the binary.
Fixes: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3225
Differential revision: https://reviews.llvm.org/D37439
llvm-svn: 313145
Diffstat (limited to 'llvm/test/Object')
| -rw-r--r-- | llvm/test/Object/Inputs/macho-invalid-dylib-cmdsize-past-eof | bin | 0 -> 56 bytes | |||
| -rw-r--r-- | llvm/test/Object/macho-invalid.test | 3 |
2 files changed, 3 insertions, 0 deletions
diff --git a/llvm/test/Object/Inputs/macho-invalid-dylib-cmdsize-past-eof b/llvm/test/Object/Inputs/macho-invalid-dylib-cmdsize-past-eof Binary files differnew file mode 100644 index 00000000000..feefab933ec --- /dev/null +++ b/llvm/test/Object/Inputs/macho-invalid-dylib-cmdsize-past-eof diff --git a/llvm/test/Object/macho-invalid.test b/llvm/test/Object/macho-invalid.test index e956680a2ce..1a7ac21d744 100644 --- a/llvm/test/Object/macho-invalid.test +++ b/llvm/test/Object/macho-invalid.test @@ -284,6 +284,9 @@ INVALID-DYLIB-WRONG-FILETYPE: macho-invalid-dylib-wrong-filetype': truncated or RUN: not llvm-objdump -macho -private-headers %p/Inputs/macho-invalid-dylib-no-id 2>&1 | FileCheck -check-prefix INVALID-DYLIB-NO-ID %s INVALID-DYLIB-NO-ID: macho-invalid-dylib-no-id': truncated or malformed object (no LC_ID_DYLIB load command in dynamic library filetype) +RUN: not llvm-objdump -macho -private-headers %p/Inputs/macho-invalid-dylib-cmdsize-past-eof 2>&1 | FileCheck -check-prefix INVALID-DYLIB-CMDSIZE %s +INVALID-DYLIB-CMDSIZE: macho-invalid-dylib-cmdsize-past-eof': truncated or malformed object (load command 0 extends past end of file) + RUN: not llvm-objdump -macho -private-headers %p/Inputs/macho-invalid-uuid-more-than-one 2>&1 | FileCheck -check-prefix INVALID-UUID-MORE-THAN-ONE %s INVALID-UUID-MORE-THAN-ONE: macho-invalid-uuid-more-than-one': truncated or malformed object (more than one LC_UUID command) |
