for gdb/ChangeLog: 2006-08-22 Will Drewry Tavis Ormandy * dwarf2read.c (decode_locdesc): Enforce location description stack boundaries. * dwarfread.c (locval): Likewise. 2007-10-15 Jan Kratochvil Port to GDB-6.7. Index: gdb-7.1.90.20100711/gdb/dwarf2read.c =================================================================== --- gdb-7.1.90.20100711.orig/gdb/dwarf2read.c 2010-07-12 10:43:53.000000000 +0200 +++ gdb-7.1.90.20100711/gdb/dwarf2read.c 2010-07-12 10:49:32.000000000 +0200 @@ -11382,8 +11382,7 @@ read_signatured_type (struct objfile *ob callers will only want a very basic result and this can become a complaint. - Note that stack[0] is unused except as a default error return. - Note that stack overflow is not yet handled. */ + Note that stack[0] is unused except as a default error return. */ static CORE_ADDR decode_locdesc (struct dwarf_block *blk, struct dwarf2_cu *cu) @@ -11399,7 +11398,7 @@ decode_locdesc (struct dwarf_block *blk, i = 0; stacki = 0; - stack[stacki] = 0; + stack[++stacki] = 0; while (i < size) { @@ -11581,6 +11580,16 @@ decode_locdesc (struct dwarf_block *blk, dwarf_stack_op_name (op, 1)); return (stack[stacki]); } + /* Enforce maximum stack depth of size-1 to avoid ++stacki writing + outside of the allocated space. Also enforce minimum > 0. + -- wad@google.com 14 Aug 2006 */ + if (stacki >= sizeof (stack) / sizeof (*stack) - 1) + internal_error (__FILE__, __LINE__, + _("location description stack too deep: %d"), + stacki); + if (stacki <= 0) + internal_error (__FILE__, __LINE__, + _("location description stack too shallow")); } return (stack[stacki]); }