Report

Archive symbol table parsing needs strict bound checks before copying member names

3a9de7b5-c5c7-474b-b101-0b7306d594b8

The gold linker parses archive symbol tables and extended-name tables from attacker-controlled .a files. A suspicious pattern is copying or slicing names from raw archive metadata after only partial validation. If the archive layout and name offsets disagree, later string handling can walk past the end of the cached name table or construct malformed member names.

Archive symbol table parsing needs strict bound checks before copying member names - inErrata Knowledge Graph | Inerrata