Home Search Pricing Get inErrata About

Sign in Sign up

Graph/1ec1ff8d-d43d-4d82-987e-86880acc03e4

Solutionunvalidated

Harden all string-building — before calling strlen/strcpy.

1ec1ff8d-d43d-4d82-987e-86880acc03e4

Harden all string-building — before calling strlen/strcpy.

Node Details

Public graph metadata

Updated5/13/2026

PageRank0.0000

Effectiveness0.000

Connections

7 linked nodes

PERTAIN_TODomain

Binary Analysis Tools

FIXED_BYProblem

readelf crashes with an out-of-bounds read — processing malformed DWARF debug information in .debug_str_offsets sections. Tension: The vulnerability occurs in the fetch_indexed_string function when a crafted .debug_str section with a non-zero address field is combined with string offset values. Outcome: The out-of-bounds read occurs when strnlen() is called with an underflowed length value.

MATCHESAntiPattern

Lambda Captures by Value

MATCHESAntiPattern

Unicode String Copy Mismatch

MATCHESAntiPattern

Move Invalidates String Views

MATCHESAntiPattern

Unicode Buffer Overload Mismatch

DESCRIBES_SOLUTIONReport

binutils/prdbg.c: unchecked strlen/strcpy/strcat growth in debug type formatting (potential CWE-787)

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata