From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Andrew Burgess To: git-commits@fedoraproject.org Subject: [rpms/gdb] f44: fix rhbz2498034 - fix use-after-free in gdb_read_core_file_mappings Date: Fri, 10 Jul 2026 20:04:25 GMT Message-ID: <178371386585.1.8456318842649907797.rpms-gdb-f07b1f2b02be@fedoraproject.org> List-ID: X-Git-Repo: rpms/gdb X-Git-Branch: f44 X-Git-Rev: f07b1f2b02bea7d5a40aa5d5dadd71043b904b58 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2RiCiAgICAgICAgICAgIEJyYW5jaCA6IGY0NAogICAgICAgICAgICBDb21t aXQgOiBmMDdiMWYyYjAyYmVhN2Q1YTQwYWE1ZDVkYWRkNzEwNDNiOTA0YjU4CiAgICAgICAgICAg IEF1dGhvciA6IEFuZHJldyBCdXJnZXNzIDxhYnVyZ2Vzc0ByZWRoYXQuY29tPgogICAgICAgICAg ICBEYXRlICAgOiAyMDI2LTA3LTA5VDEwOjA3OjAzKzAxOjAwCiAgICAgICAgICAgIFN0YXRzICA6 ICs4Ny8tMSBpbiA0IGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVk b3JhcHJvamVjdC5vcmcvcnBtcy9nZGIvYy9mMDdiMWYyYjAyYmVhN2Q1YTQwYWE1ZDVkYWRkNzEw NDNiOTA0YjU4P2JyYW5jaD1mNDQKCiAgICAgICAgICAgIExvZzoKICAgICAgICAgICAgZml4IHJo YnoyNDk4MDM0IC0gZml4IHVzZS1hZnRlci1mcmVlIGluIGdkYl9yZWFkX2NvcmVfZmlsZV9tYXBw aW5ncwoKQmFja3BvcnQgdGhlIGZvbGxvd2luZyB1cHN0cmVhbSBjb21taXQgaW4gb3JkZXIgdG8g YWRkcmVzcyBSSEJaCjI0OTgwMzQ6IDkzZjUzNmQ4MTNjNDE1MjdlOGM5MzlhNWY4YTkwYTRiMzdh NWFiYWIuICBUaGlzIGNvbW1pdCB3aWxsCmRyb3Agb3V0IHdoZW4gd2UgcmViYXNlIHRvIEdEQiAx OC4KCi0tLQpkaWZmIC0tZ2l0IGEvX2dkYi5zcGVjLlBhdGNoLmluY2x1ZGUgYi9fZ2RiLnNwZWMu UGF0Y2guaW5jbHVkZQppbmRleCBiYTc2OTM0Li5iZWQ5MmE1IDEwMDY0NAotLS0gYS9fZ2RiLnNw ZWMuUGF0Y2guaW5jbHVkZQorKysgYi9fZ2RiLnNwZWMuUGF0Y2guaW5jbHVkZQpAQCAtOTEsMyAr OTEsNyBAQCBQYXRjaDAxNTogZ2RiLWJhY2twb3J0LWRhcC1jb3JlLWZpbGUtc3VwcG9ydC5wYXRj aAogIyBUaGlzIGNvbW1pdCB3aWxsIG5vdCBiZSBuZWVkZWQgb25jZSB3ZSByZWJhc2UgdG8gR0RC IDE4LgogUGF0Y2gwMTY6IGdkYi1iYWNrcG9ydC1saWJpYmVydHktc3luYy5wYXRjaAogCisjIEJh Y2twb3J0IG9mIHVwc3RyZWFtIGNvbW1pdCA5M2Y1MzZkODEzYzQxNTI3ZThjOTM5YTVmOGE5MGE0 IHRvIGZpeAorIyBSSEJaMjQ5ODAzNC4KK1BhdGNoMDE3OiBnZGItYmFja3BvcnQtY29yZWZpbGUt dXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCisKCmRpZmYgLS1naXQgYS9fcGF0Y2hfb3JkZXIgYi9f cGF0Y2hfb3JkZXIKaW5kZXggNzA3ZWFiMS4uYWVkNWFlMyAxMDA2NDQKLS0tIGEvX3BhdGNoX29y ZGVyCisrKyBiL19wYXRjaF9vcmRlcgpAQCAtMTQsMyArMTQsNCBAQCBnZGItcmhiejI0NjcyNTEt Y29tcHV0ZWQtbG9jYXRpb24tc3ludGhldGljLXBvaW50ZXJzLnBhdGNoCiBnZGItdGNsOS11dGY4 LWVuY29kaW5nLWZpeC5wYXRjaAogZ2RiLWJhY2twb3J0LWRhcC1jb3JlLWZpbGUtc3VwcG9ydC5w YXRjaAogZ2RiLWJhY2twb3J0LWxpYmliZXJ0eS1zeW5jLnBhdGNoCitnZGItYmFja3BvcnQtY29y ZWZpbGUtdXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCgpkaWZmIC0tZ2l0IGEvZ2RiLWJhY2twb3J0 LWNvcmVmaWxlLXVzZS1hZnRlci1mcmVlLWZpeC5wYXRjaCBiL2dkYi1iYWNrcG9ydC1jb3JlZmls ZS11c2UtYWZ0ZXItZnJlZS1maXgucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAw MDAwMC4uNjRhYTIzZQotLS0gL2Rldi9udWxsCisrKyBiL2dkYi1iYWNrcG9ydC1jb3JlZmlsZS11 c2UtYWZ0ZXItZnJlZS1maXgucGF0Y2gKQEAgLTAsMCArMSw3NyBAQAorRnJvbSBGRURPUkFfUEFU Q0hFUyBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IExhbmNlbG90IFNJWCA8bGFuY2Vs b3Quc2l4QGFtZC5jb20+CitEYXRlOiBNb24sIDEzIE9jdCAyMDI1IDE1OjExOjA5ICswMTAwCitT dWJqZWN0OiBnZGItYmFja3BvcnQtY29yZWZpbGUtdXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCisK Kzs7IEJhY2twb3J0IG9mIHVwc3RyZWFtIGNvbW1pdCA5M2Y1MzZkODEzYzQxNTI3ZThjOTM5YTVm OGE5MGE0IHRvIGZpeAorOzsgUkhCWjI0OTgwMzQuCisKK2dkYi9jb3JlbG93OiBGaXggdXNlLWFm dGVyLWZyZWUgaW4gZ2RiX3JlYWRfY29yZV9maWxlX21hcHBpbmdzCisKK0EgcmVjZW50IHJlZmFj dG9yIChmYzhlNWE1NjViMyAtLSBnZGI6IG1ha2Ugc3RydWN0dXJlZCBjb3JlIGZpbGUKK21hcHBp bmdzIHByb2Nlc3NpbmcgZ2xvYmFsKSBpbiBnZGIvY29yZWxvdy5jOmdkYl9yZWFkX2NvcmVfZmls ZV9tYXBwaW5ncworaW50cm9kdWNlZCBhIHVzZS1hZnRlci1mcmVlIGJ1ZyBkZXRlY3RlZCBieSBh ZGRyZXNzIHNhbml0aXplci4KKworSW4gdGhpcyBjaGFuZ2UsIGEgY2FjaGUgaXMgYnVpbHQgd2hp Y2ggaG9sZHMgYWRkcmVzc2VzIHRvIGVsZW1lbnRzIG9mIGEKK3N0ZDo6dmVjdG9yLiAgSG93ZXZl ciwgYXMgZWxlbWVudHMgYXMgaW5zZXJ0ZWQgaW4gdGhlIHZlY3RvciwgdGhlCithZGRyZXNzZXMg aW4gdGhlIGNhY2hlIHNob3VsZCBiZSBpbnZhbGlkYXRlZCwgYnV0IGFyZSBub3QsIGxlYWRpbmcg dG8KK3RoZSB1c2UtYWZ0ZXItZnJlZSBpc3N1ZS4KKworVGhpcyBwYXRjaCBwcm9wb3NlcyB0byBz dG9yZSB0aGUgaW5kZXggaW4gdGhlIHZlY3RvciBpbiB0aGUgY2FjaGUKK2luc3RlYWQgb2YgdGhl IGFkZHJlc3Mgb2YgdGhlIGVsZW1lbnQsIHNvbHZpbmcgdGhlIGludmFsaWRhdGlvbiBpc3N1ZS4K K0FuIGFsdGVybmF0aXZlIGFwcHJvYWNoIGNvdWxkIGJlIHRvIHVzZSBhIHN0ZDo6bGlzdCB3aGlj aCBkb2VzIG5vdCBuZWVkCitpbnZhbGlkYXRpb24gb2YgYWRkcmVzc2VzL3JlZmVyZW5jZXMvaXRl cmF0b3JzIGFzIHRoZSBjb250YWluZXIgaXMKK2dyb3duLgorCitDaGFuZ2UtSWQ6IEliNTdkODdj NWQwNDA1ZmZhM2I3ZDM4NTU3ZmIzM2Y3MjgzYzVkMDYzCitBcHByb3ZlZC1CeTogQW5kcmV3IEJ1 cmdlc3MgPGFidXJnZXNzQHJlZGhhdC5jb20+CisKK2RpZmYgLS1naXQgYS9nZGIvY29yZWxvdy5j IGIvZ2RiL2NvcmVsb3cuYworLS0tIGEvZ2RiL2NvcmVsb3cuYworKysrIGIvZ2RiL2NvcmVsb3cu YworQEAgLTIwOTAsMTkgKzIwOTAsMjAgQEAgZ2RiX3JlYWRfY29yZV9maWxlX21hcHBpbmdzIChz dHJ1Y3QgZ2RiYXJjaCAqZ2RiYXJjaCwgc3RydWN0IGJmZCAqY2JmZCkKKyAgIC8qIEEgbWFwIGVu dHJ5IHVzZWQgd2hpbGUgYnVpbGRpbmcgUkVTVUxUUy4gICovCisgICBzdHJ1Y3QgbWFwX2VudHJ5 CisgICB7CistICAgIGV4cGxpY2l0IG1hcF9lbnRyeSAoY29yZV9tYXBwZWRfZmlsZSAqcHRyKQor LSAgICAgIDogZmlsZV9kYXRhIChwdHIpCisrICAgIGV4cGxpY2l0IG1hcF9lbnRyeSAoc2l6ZV90 IGlkeCkKKysgICAgICA6IGZpbGVfZGF0YV9pbmRleCAoaWR4KSwKKysJaWdub3JlX2J1aWxkX2lk X3AgKGZhbHNlKQorICAgICB7IC8qIE5vdGhpbmcuICAqLyB9CisgCisgICAgIC8qIFBvaW50cyB0 byBhbiBlbnRyeSBpbiBSRVNVTFRTLCB0aGlzIGFsbG93cyBlbnRyaWVzIHRvIGJlIHF1aWNrbHkK KyAgICAgICAgbG9va2VkIHVwIGFuZCB1cGRhdGVkIGFzIG5ldyBtYXBwaW5ncyBhcmUgcmVhZC4g ICovCistICAgIGNvcmVfbWFwcGVkX2ZpbGUgKmZpbGVfZGF0YSA9IG51bGxwdHI7CisrICAgIHNp emVfdCBmaWxlX2RhdGFfaW5kZXg7CisgCisgICAgIC8qIElmIHRydWUgdGhlbiB3ZSBoYXZlIHNl ZW4gbXVsdGlwbGUgZGlmZmVyZW50IGJ1aWxkLWlkcyBhc3NvY2lhdGVkCisgICAgICAgIHdpdGgg dGhlIGZpbGVuYW1lIG9mIEZJTEVfREFUQS4gIFRoZSBGSUxFX0RBVEEtPmJ1aWxkX2lkIGZpZWxk IHdpbGwKKyAgICAgICAgaGF2ZSBiZWVuIHNldCB0byBudWxscHRyLCBhbmQgd2Ugc2hvdWxkIG5v dCBzZXQgRklMRV9EQVRBLT5idWlsZF9pZAorICAgICAgICBpbiBmdXR1cmUuICAqLworLSAgICBi b29sIGlnbm9yZV9idWlsZF9pZF9wID0gZmFsc2U7CisrICAgIGJvb2wgaWdub3JlX2J1aWxkX2lk X3A7CisgICB9OworIAorICAgLyogQWxsIGZpbGVzIG1hcHBlZCBpbnRvIHRoZSBjb3JlIGZpbGUu ICBUaGUga2V5IGlzIHRoZSBmaWxlbmFtZS4gICovCitAQCAtMjE0MSw4ICsyMTQyLDkgQEAgZ2Ri X3JlYWRfY29yZV9maWxlX21hcHBpbmdzIChzdHJ1Y3QgZ2RiYXJjaCAqZ2RiYXJjaCwgc3RydWN0 IGJmZCAqY2JmZCkKKyAJICAgIHJlc3VsdHMuZW1wbGFjZV9iYWNrICgpOworIAorIAkgICAgLyog VGhlIGVudHJ5IHRvIGJlIGFkZGVkIHRvIHRoZSBsb29rdXAgbWFwLiAgKi8KKy0JICAgIG1hcF9l bnRyeSBlbnRyeSAoJnJlc3VsdHMuYmFjayAoKSk7CistCSAgICBlbnRyeS5maWxlX2RhdGEtPmZp bGVuYW1lID0gZmlsZW5hbWU7CisrCSAgICBtYXBfZW50cnkgZW50cnkgKHN0ZDo6ZGlzdGFuY2Ug KCZyZXN1bHRzLmZyb250ICgpLAorKwkJCQkJICAgICZyZXN1bHRzLmJhY2sgKCkpKTsKKysJICAg IHJlc3VsdHNbZW50cnkuZmlsZV9kYXRhX2luZGV4XS5maWxlbmFtZSA9IGZpbGVuYW1lOworIAor IAkgICAgLyogQWRkIGVudHJ5IHRvIHRoZSBxdWljayBsb29rdXAgbWFwIGFuZCB1cGRhdGUgSVRF Ui4gICovCisgCSAgICBhdXRvIGluc2VydGVkX3Jlc3VsdAorQEAgLTIxNTEsNyArMjE1Myw3IEBA IGdkYl9yZWFkX2NvcmVfZmlsZV9tYXBwaW5ncyAoc3RydWN0IGdkYmFyY2ggKmdkYmFyY2gsIHN0 cnVjdCBiZmQgKmNiZmQpCisgCSAgICBpdGVyID0gaW5zZXJ0ZWRfcmVzdWx0LmZpcnN0OworIAkg IH0KKyAKKy0JY29yZV9tYXBwZWRfZmlsZSAmZmlsZV9kYXRhID0gKml0ZXItPnNlY29uZC5maWxl X2RhdGE7CisrCWNvcmVfbWFwcGVkX2ZpbGUgJmZpbGVfZGF0YSA9IHJlc3VsdHNbaXRlci0+c2Vj b25kLmZpbGVfZGF0YV9pbmRleF07CisgCWJvb2wgJmlnbm9yZV9idWlsZF9pZF9wID0gaXRlci0+ c2Vjb25kLmlnbm9yZV9idWlsZF9pZF9wOworIAorIAlmaWxlX2RhdGEucmVnaW9ucy5lbXBsYWNl X2JhY2sgKHN0YXJ0LCBlbmQsIGZpbGVfb2ZzKTsKCmRpZmYgLS1naXQgYS9nZGIuc3BlYyBiL2dk Yi5zcGVjCmluZGV4IGJkZWZhYTUuLjhiZjViOWEgMTAwNjQ0Ci0tLSBhL2dkYi5zcGVjCisrKyBi L2dkYi5zcGVjCkBAIC00NSw3ICs0NSw3IEBAIFZlcnNpb246IDE3LjIKIAogIyBUaGUgcmVsZWFz ZSBhbHdheXMgY29udGFpbnMgYSBsZWFkaW5nIHJlc2VydmVkIG51bWJlciwgc3RhcnQgaXQgYXQg MS4KICMgYHVwc3RyZWFtJyBpcyBub3QgYSBwYXJ0IG9mIGBuYW1lJyB0byBzdGF5IGZ1bGx5IHJw bSBkZXBlbmRlbmNpZXMgY29tcGF0aWJsZSBmb3IgdGhlIHRlc3RpbmcuCi1SZWxlYXNlOiAxJXs/ ZGlzdH0KK1JlbGVhc2U6IDIlez9kaXN0fQogCiBMaWNlbnNlOiBHUEwtMy4wLW9yLWxhdGVyIEFO RCBCU0QtMy1DbGF1c2UgQU5EIEZTRkFQIEFORCBMR1BMLTIuMS1vci1sYXRlciBBTkQgR1BMLTIu MC1vci1sYXRlciBBTkQgTEdQTC0yLjAtb3ItbGF0ZXIgQU5EIExpY2Vuc2VSZWYtRmVkb3JhLVB1 YmxpYy1Eb21haW4gQU5EIEdGREwtMS4zLW9yLWxhdGVyIEFORCBMR1BMLTIuMC1vci1sYXRlciBX SVRIIEdDQy1leGNlcHRpb24tMi4wIEFORCBHUEwtMy4wLW9yLWxhdGVyIFdJVEggR0NDLWV4Y2Vw dGlvbi0zLjEgQU5EIEdQTC0yLjAtb3ItbGF0ZXIgV0lUSCBHTlUtY29tcGlsZXItZXhjZXB0aW9u IEFORCBNSVQKICMgRG8gbm90IHByb3ZpZGUgVVJMIGZvciBzbmFwc2hvdHMgYXMgdGhlIGZpbGUg bGFzdHMgdGhlcmUgb25seSBmb3IgMiBkYXlzLgpAQCAtOTI2LDYgKzkyNiwxMCBAQCBmaQogCiAl Y2hhbmdlbG9nCiAqIFdlZCBKdWwgOCAyMDI2IEFuZHJldyBCdXJnZXNzIDxhYnVyZ2Vzc0ByZWRo YXQuY29tPgorLSBCYWNrcG9ydCB1cHN0cmVhbSBjb21taXQgOTNmNTM2ZDgxM2M0MTUyNyB0byBm aXggUkhCWiAyNDk4MDM0LiAgVGhpcworICBjb21taXQgd2lsbCBkcm9wIG91dCB3aGVuIHdlIHJl YmFzZSB0byBHREIgMTguCisKKyogV2VkIEp1bCA4IDIwMjYgQW5kcmV3IEJ1cmdlc3MgPGFidXJn ZXNzQHJlZGhhdC5jb20+CiAtIEJhY2twb3J0IHVwc3RyZWFtIGNvbW1pdCBiZTNhOTQwNWNlYjRk NmQ2IHRvIGZpeCBhbmQgaXNzdWUgd2l0aCB0aGUKICAgRCBkZW1hbmdsZXIgKFJIQlogMjM2ODM1 MCkuICBUaGlzIGNvbW1pdCB3aWxsIGRyb3Agb3V0IHdoZW4gd2UKICAgcmViYXNlIHRvIEdEQiAx OC4K