diff options
| author | Roland Shoemaker <roland@golang.org> | 2021-10-14 13:02:01 -0700 |
|---|---|---|
| committer | Roland Shoemaker <roland@golang.org> | 2021-10-28 15:55:26 +0000 |
| commit | 61536ec03063b4951163bd09609c86d82631fa27 (patch) | |
| tree | 4e1c7c30180505efd2f93390f8237b633c6603e2 /src/os/executable_path.go | |
| parent | 278b9b3a4c7c01929133737e960335afa18eeec3 (diff) | |
| download | go-61536ec03063b4951163bd09609c86d82631fa27.tar.xz | |
debug/macho: fail on invalid dynamic symbol table command
Fail out when loading a file that contains a dynamic symbol table
command that indicates a larger number of symbols than exist in the
loaded symbol table.
Thanks to Burak Çarıkçı - Yunus Yıldırım (CT-Zer0 Crypttech) for
reporting this issue.
Fixes #48990
Fixes CVE-2021-41771
Change-Id: Ic3d6e6529241afcc959544b326b21b663262bad5
Reviewed-on: https://go-review.googlesource.com/c/go/+/355990
Reviewed-by: Julie Qiu <julie@golang.org>
Reviewed-by: Katie Hockman <katie@golang.org>
Reviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>
Run-TryBot: Roland Shoemaker <roland@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Trust: Katie Hockman <katie@golang.org>
Diffstat (limited to 'src/os/executable_path.go')
0 files changed, 0 insertions, 0 deletions