Commit Graph

26 Commits

Author SHA1 Message Date
David Anderson
ec604facdb Fixed bug in showing html references line.
bugrecord.py
2016-05-22 13:08:19 -07:00
David Anderson
a230959ded Update with latest bug fix.
bugxml/data.txt
2016-05-22 13:00:40 -07:00
David Anderson
acae971371 added new error code
libdwarf/dwarf_errmsg_list.c
libdwarf/libdwarf.h.in

Test for inconsistent line table header data
and provide a default string indicating failure
in case the inconsistency test is inadequate.
libdwarf/dwarf_line.c
libdwarf/dwarf_line_table_reader_common.c
2016-05-22 12:55:53 -07:00
David Anderson
58093a7385 Now the lines in <pre>get their own xml
so they can be understood as individual lines..
modified:   bugrecord.py
2016-05-22 09:41:15 -07:00
David Anderson
f017024f2f Now showing latest libdwarf fix commit id.
bugxml/data.txt
2016-05-22 08:50:51 -07:00
David Anderson
6fa3f710ee modified: bugxml/data.txt
modified:   bugxml/readbugs.py

Fixed an incorrect length check to prevent a crash.
modified:   dwarfdump/print_frames.c

Set a macro structure field that was left unset.
No longer creates a zero-length malloc field.
modified:   libdwarf/dwarf_macro5.c
2016-05-22 08:46:35 -07:00
David Anderson
4aae3a23b4 Two new crashes. 016, 017 2016-05-20 18:33:13 -07:00
David Anderson
1eeffd5fa6 Added fix information to the bug data.
bugxml/data.txt
2016-05-19 13:47:05 -07:00
David Anderson
4d7c43f0d9 Fixed the output, which was not right for xml.
modified:   bugrecord.py
2016-05-17 19:22:55 -07:00
David Anderson
37cbbc8b74 bugxml:
Now we can use <pre></pre> to preserve lines where
appropriate.

modified:   bugrecord.py
modified:   readbugs.py

New vulnerabilities added.
modified:   data.txt
2016-05-17 18:42:05 -07:00
David Anderson
dd66cd617c Noted fix to DW201605-012
bugxml/data.txt
2016-05-17 07:15:54 -07:00
David Anderson
10ca310f64 Updated bug text for clarity.
bugxml/data.txt

Harden to account for corrupt relocation records.
libdwarf/dwarf_elf_access.c

Remove trailing whitespace.
libdwarf/dwarf_macro5.c
2016-05-17 07:03:22 -07:00
David Anderson
814da3381c Made use of
testcase:
more uniform. Accidental irregularities removed.
modified:   bugxml/data.txt
2016-05-13 08:08:12 -07:00
David Anderson
63633bc14a All currently known vulnerabilities fixed.
bugxml/data.txt

Fix indents, remove trailing whitespace.
   dwarfdump/print_abbrevs.c
   dwarfdump/print_aranges.c
   dwarfdump/print_frames.c
   dwarfdump/print_sections.c

Ensure we check dwarf functtion status return.
These sources used only at build time.
   dwarfdump/tag_attr.c
   dwarfdump/tag_tree.c
2016-05-12 10:50:44 -07:00
David Anderson
82d8e00785 bugxml/data.txt
Moved a couple functions between source files
and made them static. A couple commentary changes.
print_frames.c, though, needed hardening against
corrupt frame data.
dwarfdump/globals.h
dwarfdump/print_aranges.c
dwarfdump/print_die.c
dwarfdump/print_frames.c
dwarfdump/print_sections.c

All data reads from an object ensure the
read is actually in a section.
It is always possible something was overlooked, but
all the reading macros and functions now do checks.
libdwarf/dwarf_arange.c
libdwarf/dwarf_die_deliv.c
libdwarf/dwarf_errmsg_list.c
libdwarf/dwarf_form.c
libdwarf/dwarf_frame.c
libdwarf/dwarf_frame2.c
libdwarf/dwarf_global.c
libdwarf/dwarf_line.c
libdwarf/dwarf_line_table_reader_common.c
libdwarf/dwarf_loc.c
libdwarf/dwarf_loc2.c
libdwarf/dwarf_macro5.c
libdwarf/dwarf_opaque.h
libdwarf/dwarf_print_lines.c
libdwarf/dwarf_query.c
libdwarf/dwarf_ranges.c
libdwarf/dwarf_util.c
libdwarf/dwarf_util.h
libdwarf/dwarf_xu_index.c
libdwarf/libdwarf.h.in
2016-05-12 07:39:36 -07:00
David Anderson
8312f4ddc3 Spelling error fixed.
modified:   data.txt
2016-05-07 14:48:46 -07:00
David Anderson
f1619647b6 Noted release 20160507 (new field for that)
modified:   bugxml/bugrecord.py
modified:   bugxml/data.txt
modified:   bugxml/readbugs.py
2016-05-07 14:08:23 -07:00
David Anderson
a405d12199 Shows the
Shows the git id of the fixes DW201605-{010,011}
	modified:   data.txt
2016-05-07 13:57:55 -07:00
David Anderson
334b908782 A typo hid one fixdate from the reporting.
Fixed.
bugxml/data.txt
2016-05-06 17:35:54 -07:00
David Anderson
4fd1e02db0 Updated status on the vulnerabilities.
modified:   data.txt
2016-05-06 17:31:31 -07:00
David Anderson
b6ec2dfd85 More to do here.
bugxml/data.txt

libdwarf
* dwarf_errmsg_list.c: Added DW_DLE_ZLIB_SECTION_SHORT.
    * dwarf_form.c: Now checking for section overrun.
    * dwarf_init_finish.c: Now checking zlib reading
      for section overrun.
    * dwarf_macro5.c: Now checking for section overrun and
      also fixing double delete caused by having
      _dwarf_get_alloc() space pointing at other _dwarf_get_alloc()
      space. Because in case of error the order of free
      of such is unpredictable!
    * dwarf_macro5.h: Added comment on mc_srcfiles member.
    * libdwarf.h.in: Added DW_DLE_ZLIB_SECTION_SHORT.
2016-05-06 17:16:15 -07:00
David Anderson
6ad869e6ba DW201605-007 is fixed.
bugxml/data.txt
2016-05-06 08:43:10 -07:00
David Anderson
eb1472afac New bugr reports.
bugxml/data.txt

Now prints strings so that
control characters do not
cause problems. Easier to read too.
dwarfdump/Makefile.in
dwarfdump/NEWS
dwarfdump/dwarfdump.1
dwarfdump/dwarfdump.c
dwarfdump/globals.h
dwarfdump/print_die.c
dwarfdump/print_frames.c
dwarfdump/print_lines.c
dwarfdump/print_macro.c
dwarfdump/print_macros.c
dwarfdump/sanitized.c

Removed trailing whitespace.
dwarfexample/simplereader.c

New checking for corrupt input.
libdwarf/dwarf_errmsg_list.c
libdwarf/dwarf_form.c
libdwarf/dwarf_line.c
libdwarf/dwarf_opaque.h
libdwarf/dwarf_query.c
libdwarf/dwarf_util.h
libdwarf/libdwarf.h.in
2016-05-06 08:26:36 -07:00
David Anderson
19256ea6d9 New set of bugs.
bugxml/data.txt
2016-05-05 10:22:38 -07:00
David Anderson
3ec36c3413 Now checks for duplicate id:
bugxml/readbugs.py
2016-05-05 10:21:52 -07:00
David Anderson
61cee134c5 These record critical vulnerabilities in libdwarf.
Used to create a public record.

new file:   bugxml/README
new file:   bugxml/bugrecord.py
new file:   bugxml/data.template
new file:   bugxml/data.txt
new file:   bugxml/readbugs.py
2016-05-05 09:21:32 -07:00