Unverified Commit 3deb8d27 authored by Vladimír Čunát's avatar Vladimír Čunát
Browse files

binutils: patch 2.44 with backported 2.45 CVE fixes (#449250)

parents 21eb5e06 88ceb91b

pkgs/development/tools/misc/binutils/CVE-2025-5244.diff

0 → 100644
+13 −0
Original line number Diff line number Diff line 
Backported patch originally targeted against 2.45.

--- a/bfd/elflink.c

+++ b/bfd/elflink.c

@@ -14356,5 +14356,6 @@ elf_gc_sweep (bfd *abfd, struct bfd_link_info *info)

	  if (o->flags & SEC_GROUP)

	    {

	      asection *first = elf_next_in_group (o);

-	      o->gc_mark = first->gc_mark;

+	      if (first != NULL)

+	        o->gc_mark = first->gc_mark;

	    }



	  if (o->gc_mark)

pkgs/development/tools/misc/binutils/CVE-2025-5245.diff

0 → 100644
+26 −0
Original line number Diff line number Diff line 
Backported patch originally targeted against 2.45.

--- a/binutils/debug.c

+++ b/binutils/debug.c

@@ -2554,9 +2554,6 @@ debug_write_type (struct debug_handle *info,

     case DEBUG_KIND_UNION_CLASS:

       return debug_write_class_type (info, fns, fhandle, type, tag);

     case DEBUG_KIND_ENUM:

-      if (type->u.kenum == NULL)

-	return (*fns->enum_type) (fhandle, tag, (const char **) NULL,

-				  (bfd_signed_vma *) NULL);

       return (*fns->enum_type) (fhandle, tag, type->u.kenum->names,

 				type->u.kenum->values);

     case DEBUG_KIND_POINTER:

@@ -3097,9 +3094,9 @@ debug_type_samep (struct debug_handle *info, struct debug_type_s *t1,

       break;



     case DEBUG_KIND_ENUM:

-      if (t1->u.kenum == NULL)

-	ret = t2->u.kenum == NULL;

-      else if (t2->u.kenum == NULL)

+      if (t1->u.kenum->names == NULL)

+	ret = t2->u.kenum->names == NULL;

+      else if (t2->u.kenum->names == NULL)

 	ret = false;

       else

 	{

pkgs/development/tools/misc/binutils/default.nix

+8 −0
Original line number Diff line number Diff line
@@ -118,6 +118,14 @@ stdenv.mkDerivation (finalAttrs: { 
    ./avr-size.patch



    ./windres-locate-gcc.patch



    # Backported against CVE patched in the 2.45 series. See:

    # https://nvd.nist.gov/vuln/detail/CVE-2025-5244

    ./CVE-2025-5244.diff



    # Backported against CVE patched in the 2.45 series. See:

    # https://nvd.nist.gov/vuln/detail/CVE-2025-5245

    ./CVE-2025-5245.diff

  ];



  outputs = [