commit a642587a9c9e2dd7feacdf513c3643ce26ad3c22 Author: Christos Zoulas Date: Sat Jun 9 16:00:06 2018 +0000 Avoid reading past the end of buffer (Rui Reis) diff --git src/readelf.c src/readelf.c index 79c83f9f..1f41b461 100644 --- src/readelf.c +++ src/readelf.c @@ -842,7 +842,8 @@ do_core_note(struct magic_set *ms, unsigned char *nbuf, uint32_t type, cname = (unsigned char *) &nbuf[doff + prpsoffsets(i)]; - for (cp = cname; *cp && isprint(*cp); cp++) + for (cp = cname; cp < nbuf + size && *cp + && isprint(*cp); cp++) continue; /* * Linux apparently appends a space at the end