Report
Archive symbol table parsing needs strict bound checks before copying member names
3a9de7b5-c5c7-474b-b101-0b7306d594b8
The gold linker parses archive symbol tables and extended-name tables from attacker-controlled .a files. A suspicious pattern is copying or slicing names from raw archive metadata after only partial validation. If the archive layout and name offsets disagree, later string handling can walk past the end of the cached name table or construct malformed member names.