From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Andrew Burgess To: git-commits@fedoraproject.org Subject: [rpms/gdb] rawhide: fix rhbz2498034 - fix use-after-free in gdb_read_core_file_mappings Date: Fri, 10 Jul 2026 20:04:16 GMT Message-ID: <178371385616.1.7752516623103026415.rpms-gdb-2e5ce167bca2@fedoraproject.org> List-ID: X-Git-Repo: rpms/gdb X-Git-Branch: rawhide X-Git-Rev: 2e5ce167bca2bb0c2d37b98d6e6885dc66b2801d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2RiCiAgICAgICAgICAgIEJyYW5jaCA6IHJhd2hpZGUKICAgICAgICAgICAg Q29tbWl0IDogMmU1Y2UxNjdiY2EyYmIwYzJkMzdiOThkNmU2ODg1ZGM2NmIyODAxZAogICAgICAg ICAgICBBdXRob3IgOiBBbmRyZXcgQnVyZ2VzcyA8YWJ1cmdlc3NAcmVkaGF0LmNvbT4KICAgICAg ICAgICAgRGF0ZSAgIDogMjAyNi0wNy0wOVQxMDowNTozMCswMTowMAogICAgICAgICAgICBTdGF0 cyAgOiArODcvLTEgaW4gNCBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8vc3Jj LmZlZG9yYXByb2plY3Qub3JnL3JwbXMvZ2RiL2MvMmU1Y2UxNjdiY2EyYmIwYzJkMzdiOThkNmU2 ODg1ZGM2NmIyODAxZD9icmFuY2g9cmF3aGlkZQoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBmaXggcmhiejI0OTgwMzQgLSBmaXggdXNlLWFmdGVyLWZyZWUgaW4gZ2RiX3JlYWRfY29yZV9m aWxlX21hcHBpbmdzCgpCYWNrcG9ydCB0aGUgZm9sbG93aW5nIHVwc3RyZWFtIGNvbW1pdCBpbiBv cmRlciB0byBhZGRyZXNzIFJIQloKMjQ5ODAzNDogOTNmNTM2ZDgxM2M0MTUyN2U4YzkzOWE1Zjhh OTBhNGIzN2E1YWJhYi4gIFRoaXMgY29tbWl0IHdpbGwKZHJvcCBvdXQgd2hlbiB3ZSByZWJhc2Ug dG8gR0RCIDE4LgoKLS0tCmRpZmYgLS1naXQgYS9fZ2RiLnNwZWMuUGF0Y2guaW5jbHVkZSBiL19n ZGIuc3BlYy5QYXRjaC5pbmNsdWRlCmluZGV4IGYzZWU2MDcuLjViNWZmNjIgMTAwNjQ0Ci0tLSBh L19nZGIuc3BlYy5QYXRjaC5pbmNsdWRlCisrKyBiL19nZGIuc3BlYy5QYXRjaC5pbmNsdWRlCkBA IC05OCwzICs5OCw3IEBAIFBhdGNoMDE2OiBnZGItYmFja3BvcnQtZGFwLWNvcmUtZmlsZS1zdXBw b3J0LnBhdGNoCiAjIFRoaXMgY29tbWl0IHdpbGwgbm90IGJlIG5lZWRlZCBvbmNlIHdlIHJlYmFz ZSB0byBHREIgMTguCiBQYXRjaDAxNzogZ2RiLWJhY2twb3J0LWxpYmliZXJ0eS1zeW5jLnBhdGNo CiAKKyMgQmFja3BvcnQgb2YgdXBzdHJlYW0gY29tbWl0IDkzZjUzNmQ4MTNjNDE1MjdlOGM5Mzlh NWY4YTkwYTQgdG8gZml4CisjIFJIQloyNDk4MDM0LgorUGF0Y2gwMTg6IGdkYi1iYWNrcG9ydC1j b3JlZmlsZS11c2UtYWZ0ZXItZnJlZS1maXgucGF0Y2gKKwoKZGlmZiAtLWdpdCBhL19wYXRjaF9v cmRlciBiL19wYXRjaF9vcmRlcgppbmRleCA1YjczNDIzLi5jYWY3NjdjIDEwMDY0NAotLS0gYS9f cGF0Y2hfb3JkZXIKKysrIGIvX3BhdGNoX29yZGVyCkBAIC0xNSwzICsxNSw0IEBAIGdkYi1yaGJ6 MjQ2NzI1MS1jb21wdXRlZC1sb2NhdGlvbi1zeW50aGV0aWMtcG9pbnRlcnMucGF0Y2gKIGdkYi10 Y2w5LXV0ZjgtZW5jb2RpbmctZml4LnBhdGNoCiBnZGItYmFja3BvcnQtZGFwLWNvcmUtZmlsZS1z dXBwb3J0LnBhdGNoCiBnZGItYmFja3BvcnQtbGliaWJlcnR5LXN5bmMucGF0Y2gKK2dkYi1iYWNr cG9ydC1jb3JlZmlsZS11c2UtYWZ0ZXItZnJlZS1maXgucGF0Y2gKCmRpZmYgLS1naXQgYS9nZGIt YmFja3BvcnQtY29yZWZpbGUtdXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoIGIvZ2RiLWJhY2twb3J0 LWNvcmVmaWxlLXVzZS1hZnRlci1mcmVlLWZpeC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NApp bmRleCAwMDAwMDAwLi42NGFhMjNlCi0tLSAvZGV2L251bGwKKysrIGIvZ2RiLWJhY2twb3J0LWNv cmVmaWxlLXVzZS1hZnRlci1mcmVlLWZpeC5wYXRjaApAQCAtMCwwICsxLDc3IEBACitGcm9tIEZF RE9SQV9QQVRDSEVTIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogTGFuY2Vsb3QgU0lY IDxsYW5jZWxvdC5zaXhAYW1kLmNvbT4KK0RhdGU6IE1vbiwgMTMgT2N0IDIwMjUgMTU6MTE6MDkg KzAxMDAKK1N1YmplY3Q6IGdkYi1iYWNrcG9ydC1jb3JlZmlsZS11c2UtYWZ0ZXItZnJlZS1maXgu cGF0Y2gKKworOzsgQmFja3BvcnQgb2YgdXBzdHJlYW0gY29tbWl0IDkzZjUzNmQ4MTNjNDE1Mjdl OGM5MzlhNWY4YTkwYTQgdG8gZml4Cis7OyBSSEJaMjQ5ODAzNC4KKworZ2RiL2NvcmVsb3c6IEZp eCB1c2UtYWZ0ZXItZnJlZSBpbiBnZGJfcmVhZF9jb3JlX2ZpbGVfbWFwcGluZ3MKKworQSByZWNl bnQgcmVmYWN0b3IgKGZjOGU1YTU2NWIzIC0tIGdkYjogbWFrZSBzdHJ1Y3R1cmVkIGNvcmUgZmls ZQorbWFwcGluZ3MgcHJvY2Vzc2luZyBnbG9iYWwpIGluIGdkYi9jb3JlbG93LmM6Z2RiX3JlYWRf Y29yZV9maWxlX21hcHBpbmdzCitpbnRyb2R1Y2VkIGEgdXNlLWFmdGVyLWZyZWUgYnVnIGRldGVj dGVkIGJ5IGFkZHJlc3Mgc2FuaXRpemVyLgorCitJbiB0aGlzIGNoYW5nZSwgYSBjYWNoZSBpcyBi dWlsdCB3aGljaCBob2xkcyBhZGRyZXNzZXMgdG8gZWxlbWVudHMgb2YgYQorc3RkOjp2ZWN0b3Iu ICBIb3dldmVyLCBhcyBlbGVtZW50cyBhcyBpbnNlcnRlZCBpbiB0aGUgdmVjdG9yLCB0aGUKK2Fk ZHJlc3NlcyBpbiB0aGUgY2FjaGUgc2hvdWxkIGJlIGludmFsaWRhdGVkLCBidXQgYXJlIG5vdCwg bGVhZGluZyB0bwordGhlIHVzZS1hZnRlci1mcmVlIGlzc3VlLgorCitUaGlzIHBhdGNoIHByb3Bv c2VzIHRvIHN0b3JlIHRoZSBpbmRleCBpbiB0aGUgdmVjdG9yIGluIHRoZSBjYWNoZQoraW5zdGVh ZCBvZiB0aGUgYWRkcmVzcyBvZiB0aGUgZWxlbWVudCwgc29sdmluZyB0aGUgaW52YWxpZGF0aW9u IGlzc3VlLgorQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggY291bGQgYmUgdG8gdXNlIGEgc3RkOjps aXN0IHdoaWNoIGRvZXMgbm90IG5lZWQKK2ludmFsaWRhdGlvbiBvZiBhZGRyZXNzZXMvcmVmZXJl bmNlcy9pdGVyYXRvcnMgYXMgdGhlIGNvbnRhaW5lciBpcworZ3Jvd24uCisKK0NoYW5nZS1JZDog SWI1N2Q4N2M1ZDA0MDVmZmEzYjdkMzg1NTdmYjMzZjcyODNjNWQwNjMKK0FwcHJvdmVkLUJ5OiBB bmRyZXcgQnVyZ2VzcyA8YWJ1cmdlc3NAcmVkaGF0LmNvbT4KKworZGlmZiAtLWdpdCBhL2dkYi9j b3JlbG93LmMgYi9nZGIvY29yZWxvdy5jCistLS0gYS9nZGIvY29yZWxvdy5jCisrKysgYi9nZGIv Y29yZWxvdy5jCitAQCAtMjA5MCwxOSArMjA5MCwyMCBAQCBnZGJfcmVhZF9jb3JlX2ZpbGVfbWFw cGluZ3MgKHN0cnVjdCBnZGJhcmNoICpnZGJhcmNoLCBzdHJ1Y3QgYmZkICpjYmZkKQorICAgLyog QSBtYXAgZW50cnkgdXNlZCB3aGlsZSBidWlsZGluZyBSRVNVTFRTLiAgKi8KKyAgIHN0cnVjdCBt YXBfZW50cnkKKyAgIHsKKy0gICAgZXhwbGljaXQgbWFwX2VudHJ5IChjb3JlX21hcHBlZF9maWxl ICpwdHIpCistICAgICAgOiBmaWxlX2RhdGEgKHB0cikKKysgICAgZXhwbGljaXQgbWFwX2VudHJ5 IChzaXplX3QgaWR4KQorKyAgICAgIDogZmlsZV9kYXRhX2luZGV4IChpZHgpLAorKwlpZ25vcmVf YnVpbGRfaWRfcCAoZmFsc2UpCisgICAgIHsgLyogTm90aGluZy4gICovIH0KKyAKKyAgICAgLyog UG9pbnRzIHRvIGFuIGVudHJ5IGluIFJFU1VMVFMsIHRoaXMgYWxsb3dzIGVudHJpZXMgdG8gYmUg cXVpY2tseQorICAgICAgICBsb29rZWQgdXAgYW5kIHVwZGF0ZWQgYXMgbmV3IG1hcHBpbmdzIGFy ZSByZWFkLiAgKi8KKy0gICAgY29yZV9tYXBwZWRfZmlsZSAqZmlsZV9kYXRhID0gbnVsbHB0cjsK KysgICAgc2l6ZV90IGZpbGVfZGF0YV9pbmRleDsKKyAKKyAgICAgLyogSWYgdHJ1ZSB0aGVuIHdl IGhhdmUgc2VlbiBtdWx0aXBsZSBkaWZmZXJlbnQgYnVpbGQtaWRzIGFzc29jaWF0ZWQKKyAgICAg ICAgd2l0aCB0aGUgZmlsZW5hbWUgb2YgRklMRV9EQVRBLiAgVGhlIEZJTEVfREFUQS0+YnVpbGRf aWQgZmllbGQgd2lsbAorICAgICAgICBoYXZlIGJlZW4gc2V0IHRvIG51bGxwdHIsIGFuZCB3ZSBz aG91bGQgbm90IHNldCBGSUxFX0RBVEEtPmJ1aWxkX2lkCisgICAgICAgIGluIGZ1dHVyZS4gICov CistICAgIGJvb2wgaWdub3JlX2J1aWxkX2lkX3AgPSBmYWxzZTsKKysgICAgYm9vbCBpZ25vcmVf YnVpbGRfaWRfcDsKKyAgIH07CisgCisgICAvKiBBbGwgZmlsZXMgbWFwcGVkIGludG8gdGhlIGNv cmUgZmlsZS4gIFRoZSBrZXkgaXMgdGhlIGZpbGVuYW1lLiAgKi8KK0BAIC0yMTQxLDggKzIxNDIs OSBAQCBnZGJfcmVhZF9jb3JlX2ZpbGVfbWFwcGluZ3MgKHN0cnVjdCBnZGJhcmNoICpnZGJhcmNo LCBzdHJ1Y3QgYmZkICpjYmZkKQorIAkgICAgcmVzdWx0cy5lbXBsYWNlX2JhY2sgKCk7CisgCisg CSAgICAvKiBUaGUgZW50cnkgdG8gYmUgYWRkZWQgdG8gdGhlIGxvb2t1cCBtYXAuICAqLworLQkg ICAgbWFwX2VudHJ5IGVudHJ5ICgmcmVzdWx0cy5iYWNrICgpKTsKKy0JICAgIGVudHJ5LmZpbGVf ZGF0YS0+ZmlsZW5hbWUgPSBmaWxlbmFtZTsKKysJICAgIG1hcF9lbnRyeSBlbnRyeSAoc3RkOjpk aXN0YW5jZSAoJnJlc3VsdHMuZnJvbnQgKCksCisrCQkJCQkgICAgJnJlc3VsdHMuYmFjayAoKSkp OworKwkgICAgcmVzdWx0c1tlbnRyeS5maWxlX2RhdGFfaW5kZXhdLmZpbGVuYW1lID0gZmlsZW5h bWU7CisgCisgCSAgICAvKiBBZGQgZW50cnkgdG8gdGhlIHF1aWNrIGxvb2t1cCBtYXAgYW5kIHVw ZGF0ZSBJVEVSLiAgKi8KKyAJICAgIGF1dG8gaW5zZXJ0ZWRfcmVzdWx0CitAQCAtMjE1MSw3ICsy MTUzLDcgQEAgZ2RiX3JlYWRfY29yZV9maWxlX21hcHBpbmdzIChzdHJ1Y3QgZ2RiYXJjaCAqZ2Ri YXJjaCwgc3RydWN0IGJmZCAqY2JmZCkKKyAJICAgIGl0ZXIgPSBpbnNlcnRlZF9yZXN1bHQuZmly c3Q7CisgCSAgfQorIAorLQljb3JlX21hcHBlZF9maWxlICZmaWxlX2RhdGEgPSAqaXRlci0+c2Vj b25kLmZpbGVfZGF0YTsKKysJY29yZV9tYXBwZWRfZmlsZSAmZmlsZV9kYXRhID0gcmVzdWx0c1tp dGVyLT5zZWNvbmQuZmlsZV9kYXRhX2luZGV4XTsKKyAJYm9vbCAmaWdub3JlX2J1aWxkX2lkX3Ag PSBpdGVyLT5zZWNvbmQuaWdub3JlX2J1aWxkX2lkX3A7CisgCisgCWZpbGVfZGF0YS5yZWdpb25z LmVtcGxhY2VfYmFjayAoc3RhcnQsIGVuZCwgZmlsZV9vZnMpOwoKZGlmZiAtLWdpdCBhL2dkYi5z cGVjIGIvZ2RiLnNwZWMKaW5kZXggZDU3ZDYzMS4uZTE2Njc2NSAxMDA2NDQKLS0tIGEvZ2RiLnNw ZWMKKysrIGIvZ2RiLnNwZWMKQEAgLTQ1LDcgKzQ1LDcgQEAgVmVyc2lvbjogMTcuMgogCiAjIFRo ZSByZWxlYXNlIGFsd2F5cyBjb250YWlucyBhIGxlYWRpbmcgcmVzZXJ2ZWQgbnVtYmVyLCBzdGFy dCBpdCBhdCAxLgogIyBgdXBzdHJlYW0nIGlzIG5vdCBhIHBhcnQgb2YgYG5hbWUnIHRvIHN0YXkg ZnVsbHkgcnBtIGRlcGVuZGVuY2llcyBjb21wYXRpYmxlIGZvciB0aGUgdGVzdGluZy4KLVJlbGVh c2U6IDElez9kaXN0fQorUmVsZWFzZTogMiV7P2Rpc3R9CiAKIExpY2Vuc2U6IEdQTC0zLjAtb3It bGF0ZXIgQU5EIEJTRC0zLUNsYXVzZSBBTkQgRlNGQVAgQU5EIExHUEwtMi4xLW9yLWxhdGVyIEFO RCBHUEwtMi4wLW9yLWxhdGVyIEFORCBMR1BMLTIuMC1vci1sYXRlciBBTkQgTGljZW5zZVJlZi1G ZWRvcmEtUHVibGljLURvbWFpbiBBTkQgR0ZETC0xLjMtb3ItbGF0ZXIgQU5EIExHUEwtMi4wLW9y LWxhdGVyIFdJVEggR0NDLWV4Y2VwdGlvbi0yLjAgQU5EIEdQTC0zLjAtb3ItbGF0ZXIgV0lUSCBH Q0MtZXhjZXB0aW9uLTMuMSBBTkQgR1BMLTIuMC1vci1sYXRlciBXSVRIIEdOVS1jb21waWxlci1l eGNlcHRpb24gQU5EIE1JVAogIyBEbyBub3QgcHJvdmlkZSBVUkwgZm9yIHNuYXBzaG90cyBhcyB0 aGUgZmlsZSBsYXN0cyB0aGVyZSBvbmx5IGZvciAyIGRheXMuCkBAIC05MjksNiArOTI5LDEwIEBA IGZpCiAKICVjaGFuZ2Vsb2cKICogV2VkIEp1bCA4IDIwMjYgQW5kcmV3IEJ1cmdlc3MgPGFidXJn ZXNzQHJlZGhhdC5jb20+CistIEJhY2twb3J0IHVwc3RyZWFtIGNvbW1pdCA5M2Y1MzZkODEzYzQx NTI3IHRvIGZpeCBSSEJaIDI0OTgwMzQuICBUaGlzCisgIGNvbW1pdCB3aWxsIGRyb3Agb3V0IHdo ZW4gd2UgcmViYXNlIHRvIEdEQiAxOC4KKworKiBXZWQgSnVsIDggMjAyNiBBbmRyZXcgQnVyZ2Vz cyA8YWJ1cmdlc3NAcmVkaGF0LmNvbT4KIC0gQmFja3BvcnQgdXBzdHJlYW0gY29tbWl0IGJlM2E5 NDA1Y2ViNGQ2ZDYgdG8gZml4IGFuZCBpc3N1ZSB3aXRoIHRoZQogICBEIGRlbWFuZ2xlciAoUkhC WiAyMzY4MzUwKS4gIFRoaXMgY29tbWl0IHdpbGwgZHJvcCBvdXQgd2hlbiB3ZQogICByZWJhc2Ug dG8gR0RCIDE4Lgo=