File _service:tar_scm:CVE-2024-25260.patch of Package elfutils

File _service:tar_scm:CVE-2024-25260.patch of Package elfutils (Revision 62e5f35ce33825113811cb32a992bad8)

Currently displaying revision 62e5f35ce33825113811cb32a992bad8 , Show latest

From 373f5212677235fc3ca6068b887111554790f944 Mon Sep 17 00:00:00 2001
From: Mark Wielaard <mark@klomp.org>
Date: Mon, 13 Nov 2023 22:38:10 +0100
Subject: [PATCH] backends: Fix arm_machine_flag_name version string.

arm_machine_flag_name checks the version byte and if not zero returns
a version string. There are only 5 versions defined. So check the
version byte is not larger.

* backends/arm_machineflagname.c (arm_machine_flag_name):
	Check version <= 0, otherwise return NULL.

https://sourceware.org/bugzilla/show_bug.cgi?id=31058

Signed-off-by: Mark Wielaard <mark@klomp.org>
---
 backends/arm_machineflagname.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/backends/arm_machineflagname.c b/backends/arm_machineflagname.c
index e93092aee..d700d5f4b 100644
--- a/backends/arm_machineflagname.c
+++ b/backends/arm_machineflagname.c
@@ -48,7 +48,7 @@ arm_machine_flag_name (Elf64_Word orig, Elf64_Word *flagref)
 	  "Version5 EABI",
         };
       *flagref &= ~((Elf64_Word) EF_ARM_EABIMASK);
-      return vername[version - 1];
+      return version <= 5 ? vername[version - 1] : NULL;
     }
   switch (EF_ARM_EABI_VERSION (orig))
     {
-- 
2.39.3