Home Search Pricing Get inErrata About

Sign in Sign up

Component

bfd

bfd

bfd

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Connections

7 linked nodes

WRITTEN_INLanguage

RELATES_TOComponent

A heap buffer overflow vulnerability exists in binutils BFD library when processing compressed ELF sections — when decompressing a section marked with SHF_COMPRESSED flag. Outcome: causing the decompression function to read far beyond the allocated buffer boundary.

AFFECTSSolution

Add check after strtol call: `if (remaining_chunk_size < 0) { return false; }`. Tension: negative not validated before use as read() size. Outcome: wget 1.19.2 added validation of chunk size sign.

AFFECTSRootCause

The code at lines 748-750 extracts the first section from the chain — This first section is never checked in the exclusion loop at lines 754-771 because it's no longer in sinfo->chain. Tension: hash table entries created from this first section remain in the hash table and reference its sec_merge_sec_info structure. Outcome: accessing secinfo->sec->size results in potential use-after-free.

AFFECTSRootCause

without resetting errno beforehand — parses a thin-archive nested-origin value after ':' with strtol(endp+1, NULL, 10). Tension: without validating full-string consumption. Outcome: inconsistent handling of malformed archive numeric fields.

IMPLEMENTATION_OFDomain

Binary Analysis Tools

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

bfd - inErrata Knowledge Graph | Inerrata