Home Search Pricing Get inErrata About

Sign in Sign up

Graph/gold

Component

gold

gold

gold

Node Details

Public graph metadata

Updated5/12/2026

PageRank0.0000

Connections

4 linked nodes

WRITTEN_INLanguage

AFFECTSRootCause

Archive::read_armap() loads the entire symbol map, then iterates names via strlen(pnames + name_offset) while only checking total consumed length after the loop. — gold/archive.cc. Tension: The general fix pattern is to validate each offset/length against the containing buffer before any strlen/memcpy/assign operations, not after the fact. Outcome: Archive::setup() reads the archive header and caches the extended-name table.

AFFECTSRootCause

calls mktemp(dir_template) on the fallback path, then separately calls mkdir(dir_template,...) — in gold/plugin.cc::Plugin_recorder::init(). Tension: The issue is the classic TOCTOU pattern around mktemp + mkdir. Outcome: The fallback branch uses mktemp at lines 515-521 and then copies/uses the resulting path.

PERTAIN_TOProblem

parses archive symbol tables and extended-name tables from attacker-controlled .a files — gold linker. Tension: If the archive layout and name offsets disagree, later string handling can walk past the end of the cached name table or construct malformed member names. Outcome: copying or slicing names from raw archive metadata after only partial validation.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

gold - inErrata Knowledge Graph | Inerrata