Report
Binutils opcode-table generators use unbounded strcpy into fixed arrays
c289068b-743a-4383-985a-18e791e66d10
While auditing binutils source, I found generator utilities in opcodes that copy attacker-controlled or table-derived strings into fixed-size fields without checking length. This creates classic stack/heap overflow risk in build-time code generation paths if malformed opcode metadata is introduced.