From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Andrew Burgess To: git-commits@fedoraproject.org Subject: [rpms/gdb] f43: fix rhbz2498034 - fix use-after-free in gdb_read_core_file_mappings Date: Fri, 10 Jul 2026 20:04:36 GMT Message-ID: <178371387646.1.15223620548863234439.rpms-gdb-b2acdefc63ee@fedoraproject.org> List-ID: X-Git-Repo: rpms/gdb X-Git-Branch: f43 X-Git-Rev: b2acdefc63eeecf5382d51feffb46a2517345004 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2RiCiAgICAgICAgICAgIEJyYW5jaCA6IGY0MwogICAgICAgICAgICBDb21t aXQgOiBiMmFjZGVmYzYzZWVlY2Y1MzgyZDUxZmVmZmI0NmEyNTE3MzQ1MDA0CiAgICAgICAgICAg IEF1dGhvciA6IEFuZHJldyBCdXJnZXNzIDxhYnVyZ2Vzc0ByZWRoYXQuY29tPgogICAgICAgICAg ICBEYXRlICAgOiAyMDI2LTA3LTA5VDEwOjA2OjI1KzAxOjAwCiAgICAgICAgICAgIFN0YXRzICA6 ICs4Ny8tMSBpbiA0IGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVk b3JhcHJvamVjdC5vcmcvcnBtcy9nZGIvYy9iMmFjZGVmYzYzZWVlY2Y1MzgyZDUxZmVmZmI0NmEy NTE3MzQ1MDA0P2JyYW5jaD1mNDMKCiAgICAgICAgICAgIExvZzoKICAgICAgICAgICAgZml4IHJo YnoyNDk4MDM0IC0gZml4IHVzZS1hZnRlci1mcmVlIGluIGdkYl9yZWFkX2NvcmVfZmlsZV9tYXBw aW5ncwoKQmFja3BvcnQgdGhlIGZvbGxvd2luZyB1cHN0cmVhbSBjb21taXQgaW4gb3JkZXIgdG8g YWRkcmVzcyBSSEJaCjI0OTgwMzQ6IDkzZjUzNmQ4MTNjNDE1MjdlOGM5MzlhNWY4YTkwYTRiMzdh NWFiYWIuICBUaGlzIGNvbW1pdCB3aWxsCmRyb3Agb3V0IHdoZW4gd2UgcmViYXNlIHRvIEdEQiAx OC4KCi0tLQpkaWZmIC0tZ2l0IGEvX2dkYi5zcGVjLlBhdGNoLmluY2x1ZGUgYi9fZ2RiLnNwZWMu UGF0Y2guaW5jbHVkZQppbmRleCBlNDYyNzU3Li4wYzljMTkyIDEwMDY0NAotLS0gYS9fZ2RiLnNw ZWMuUGF0Y2guaW5jbHVkZQorKysgYi9fZ2RiLnNwZWMuUGF0Y2guaW5jbHVkZQpAQCAtNjcsMyAr NjcsNyBAQCBQYXRjaDAxMTogZ2RiLWJhY2twb3J0LWRhcC1jb3JlLWZpbGUtc3VwcG9ydC5wYXRj aAogIyBUaGlzIGNvbW1pdCB3aWxsIG5vdCBiZSBuZWVkZWQgb25jZSB3ZSByZWJhc2UgdG8gR0RC IDE4LgogUGF0Y2gwMTI6IGdkYi1iYWNrcG9ydC1saWJpYmVydHktc3luYy5wYXRjaAogCisjIEJh Y2twb3J0IG9mIHVwc3RyZWFtIGNvbW1pdCA5M2Y1MzZkODEzYzQxNTI3ZThjOTM5YTVmOGE5MGE0 IHRvIGZpeAorIyBSSEJaMjQ5ODAzNC4KK1BhdGNoMDEzOiBnZGItYmFja3BvcnQtY29yZWZpbGUt dXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCisKCmRpZmYgLS1naXQgYS9fcGF0Y2hfb3JkZXIgYi9f cGF0Y2hfb3JkZXIKaW5kZXggZDYxMjljZS4uOWI4NWI2MiAxMDA2NDQKLS0tIGEvX3BhdGNoX29y ZGVyCisrKyBiL19wYXRjaF9vcmRlcgpAQCAtMTAsMyArMTAsNCBAQCBnZGItcmhiejIzNjY0NjEt YmFkLXNvbGliLWVudHJ5LWFkZHIucGF0Y2gKIGdkYi1yaGJ6MjQ2NzI1MS1jb21wdXRlZC1sb2Nh dGlvbi1zeW50aGV0aWMtcG9pbnRlcnMucGF0Y2gKIGdkYi1iYWNrcG9ydC1kYXAtY29yZS1maWxl LXN1cHBvcnQucGF0Y2gKIGdkYi1iYWNrcG9ydC1saWJpYmVydHktc3luYy5wYXRjaAorZ2RiLWJh Y2twb3J0LWNvcmVmaWxlLXVzZS1hZnRlci1mcmVlLWZpeC5wYXRjaAoKZGlmZiAtLWdpdCBhL2dk Yi1iYWNrcG9ydC1jb3JlZmlsZS11c2UtYWZ0ZXItZnJlZS1maXgucGF0Y2ggYi9nZGItYmFja3Bv cnQtY29yZWZpbGUtdXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0 CmluZGV4IDAwMDAwMDAuLjY0YWEyM2UKLS0tIC9kZXYvbnVsbAorKysgYi9nZGItYmFja3BvcnQt Y29yZWZpbGUtdXNlLWFmdGVyLWZyZWUtZml4LnBhdGNoCkBAIC0wLDAgKzEsNzcgQEAKK0Zyb20g RkVET1JBX1BBVENIRVMgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBMYW5jZWxvdCBT SVggPGxhbmNlbG90LnNpeEBhbWQuY29tPgorRGF0ZTogTW9uLCAxMyBPY3QgMjAyNSAxNToxMTow OSArMDEwMAorU3ViamVjdDogZ2RiLWJhY2twb3J0LWNvcmVmaWxlLXVzZS1hZnRlci1mcmVlLWZp eC5wYXRjaAorCis7OyBCYWNrcG9ydCBvZiB1cHN0cmVhbSBjb21taXQgOTNmNTM2ZDgxM2M0MTUy N2U4YzkzOWE1ZjhhOTBhNCB0byBmaXgKKzs7IFJIQloyNDk4MDM0LgorCitnZGIvY29yZWxvdzog Rml4IHVzZS1hZnRlci1mcmVlIGluIGdkYl9yZWFkX2NvcmVfZmlsZV9tYXBwaW5ncworCitBIHJl Y2VudCByZWZhY3RvciAoZmM4ZTVhNTY1YjMgLS0gZ2RiOiBtYWtlIHN0cnVjdHVyZWQgY29yZSBm aWxlCittYXBwaW5ncyBwcm9jZXNzaW5nIGdsb2JhbCkgaW4gZ2RiL2NvcmVsb3cuYzpnZGJfcmVh ZF9jb3JlX2ZpbGVfbWFwcGluZ3MKK2ludHJvZHVjZWQgYSB1c2UtYWZ0ZXItZnJlZSBidWcgZGV0 ZWN0ZWQgYnkgYWRkcmVzcyBzYW5pdGl6ZXIuCisKK0luIHRoaXMgY2hhbmdlLCBhIGNhY2hlIGlz IGJ1aWx0IHdoaWNoIGhvbGRzIGFkZHJlc3NlcyB0byBlbGVtZW50cyBvZiBhCitzdGQ6OnZlY3Rv ci4gIEhvd2V2ZXIsIGFzIGVsZW1lbnRzIGFzIGluc2VydGVkIGluIHRoZSB2ZWN0b3IsIHRoZQor YWRkcmVzc2VzIGluIHRoZSBjYWNoZSBzaG91bGQgYmUgaW52YWxpZGF0ZWQsIGJ1dCBhcmUgbm90 LCBsZWFkaW5nIHRvCit0aGUgdXNlLWFmdGVyLWZyZWUgaXNzdWUuCisKK1RoaXMgcGF0Y2ggcHJv cG9zZXMgdG8gc3RvcmUgdGhlIGluZGV4IGluIHRoZSB2ZWN0b3IgaW4gdGhlIGNhY2hlCitpbnN0 ZWFkIG9mIHRoZSBhZGRyZXNzIG9mIHRoZSBlbGVtZW50LCBzb2x2aW5nIHRoZSBpbnZhbGlkYXRp b24gaXNzdWUuCitBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCBjb3VsZCBiZSB0byB1c2UgYSBzdGQ6 Omxpc3Qgd2hpY2ggZG9lcyBub3QgbmVlZAoraW52YWxpZGF0aW9uIG9mIGFkZHJlc3Nlcy9yZWZl cmVuY2VzL2l0ZXJhdG9ycyBhcyB0aGUgY29udGFpbmVyIGlzCitncm93bi4KKworQ2hhbmdlLUlk OiBJYjU3ZDg3YzVkMDQwNWZmYTNiN2QzODU1N2ZiMzNmNzI4M2M1ZDA2MworQXBwcm92ZWQtQnk6 IEFuZHJldyBCdXJnZXNzIDxhYnVyZ2Vzc0ByZWRoYXQuY29tPgorCitkaWZmIC0tZ2l0IGEvZ2Ri L2NvcmVsb3cuYyBiL2dkYi9jb3JlbG93LmMKKy0tLSBhL2dkYi9jb3JlbG93LmMKKysrKyBiL2dk Yi9jb3JlbG93LmMKK0BAIC0yMDkwLDE5ICsyMDkwLDIwIEBAIGdkYl9yZWFkX2NvcmVfZmlsZV9t YXBwaW5ncyAoc3RydWN0IGdkYmFyY2ggKmdkYmFyY2gsIHN0cnVjdCBiZmQgKmNiZmQpCisgICAv KiBBIG1hcCBlbnRyeSB1c2VkIHdoaWxlIGJ1aWxkaW5nIFJFU1VMVFMuICAqLworICAgc3RydWN0 IG1hcF9lbnRyeQorICAgeworLSAgICBleHBsaWNpdCBtYXBfZW50cnkgKGNvcmVfbWFwcGVkX2Zp bGUgKnB0cikKKy0gICAgICA6IGZpbGVfZGF0YSAocHRyKQorKyAgICBleHBsaWNpdCBtYXBfZW50 cnkgKHNpemVfdCBpZHgpCisrICAgICAgOiBmaWxlX2RhdGFfaW5kZXggKGlkeCksCisrCWlnbm9y ZV9idWlsZF9pZF9wIChmYWxzZSkKKyAgICAgeyAvKiBOb3RoaW5nLiAgKi8gfQorIAorICAgICAv KiBQb2ludHMgdG8gYW4gZW50cnkgaW4gUkVTVUxUUywgdGhpcyBhbGxvd3MgZW50cmllcyB0byBi ZSBxdWlja2x5CisgICAgICAgIGxvb2tlZCB1cCBhbmQgdXBkYXRlZCBhcyBuZXcgbWFwcGluZ3Mg YXJlIHJlYWQuICAqLworLSAgICBjb3JlX21hcHBlZF9maWxlICpmaWxlX2RhdGEgPSBudWxscHRy OworKyAgICBzaXplX3QgZmlsZV9kYXRhX2luZGV4OworIAorICAgICAvKiBJZiB0cnVlIHRoZW4g d2UgaGF2ZSBzZWVuIG11bHRpcGxlIGRpZmZlcmVudCBidWlsZC1pZHMgYXNzb2NpYXRlZAorICAg ICAgICB3aXRoIHRoZSBmaWxlbmFtZSBvZiBGSUxFX0RBVEEuICBUaGUgRklMRV9EQVRBLT5idWls ZF9pZCBmaWVsZCB3aWxsCisgICAgICAgIGhhdmUgYmVlbiBzZXQgdG8gbnVsbHB0ciwgYW5kIHdl IHNob3VsZCBub3Qgc2V0IEZJTEVfREFUQS0+YnVpbGRfaWQKKyAgICAgICAgaW4gZnV0dXJlLiAg Ki8KKy0gICAgYm9vbCBpZ25vcmVfYnVpbGRfaWRfcCA9IGZhbHNlOworKyAgICBib29sIGlnbm9y ZV9idWlsZF9pZF9wOworICAgfTsKKyAKKyAgIC8qIEFsbCBmaWxlcyBtYXBwZWQgaW50byB0aGUg Y29yZSBmaWxlLiAgVGhlIGtleSBpcyB0aGUgZmlsZW5hbWUuICAqLworQEAgLTIxNDEsOCArMjE0 Miw5IEBAIGdkYl9yZWFkX2NvcmVfZmlsZV9tYXBwaW5ncyAoc3RydWN0IGdkYmFyY2ggKmdkYmFy Y2gsIHN0cnVjdCBiZmQgKmNiZmQpCisgCSAgICByZXN1bHRzLmVtcGxhY2VfYmFjayAoKTsKKyAK KyAJICAgIC8qIFRoZSBlbnRyeSB0byBiZSBhZGRlZCB0byB0aGUgbG9va3VwIG1hcC4gICovCist CSAgICBtYXBfZW50cnkgZW50cnkgKCZyZXN1bHRzLmJhY2sgKCkpOworLQkgICAgZW50cnkuZmls ZV9kYXRhLT5maWxlbmFtZSA9IGZpbGVuYW1lOworKwkgICAgbWFwX2VudHJ5IGVudHJ5IChzdGQ6 OmRpc3RhbmNlICgmcmVzdWx0cy5mcm9udCAoKSwKKysJCQkJCSAgICAmcmVzdWx0cy5iYWNrICgp KSk7CisrCSAgICByZXN1bHRzW2VudHJ5LmZpbGVfZGF0YV9pbmRleF0uZmlsZW5hbWUgPSBmaWxl bmFtZTsKKyAKKyAJICAgIC8qIEFkZCBlbnRyeSB0byB0aGUgcXVpY2sgbG9va3VwIG1hcCBhbmQg dXBkYXRlIElURVIuICAqLworIAkgICAgYXV0byBpbnNlcnRlZF9yZXN1bHQKK0BAIC0yMTUxLDcg KzIxNTMsNyBAQCBnZGJfcmVhZF9jb3JlX2ZpbGVfbWFwcGluZ3MgKHN0cnVjdCBnZGJhcmNoICpn ZGJhcmNoLCBzdHJ1Y3QgYmZkICpjYmZkKQorIAkgICAgaXRlciA9IGluc2VydGVkX3Jlc3VsdC5m aXJzdDsKKyAJICB9CisgCistCWNvcmVfbWFwcGVkX2ZpbGUgJmZpbGVfZGF0YSA9ICppdGVyLT5z ZWNvbmQuZmlsZV9kYXRhOworKwljb3JlX21hcHBlZF9maWxlICZmaWxlX2RhdGEgPSByZXN1bHRz W2l0ZXItPnNlY29uZC5maWxlX2RhdGFfaW5kZXhdOworIAlib29sICZpZ25vcmVfYnVpbGRfaWRf cCA9IGl0ZXItPnNlY29uZC5pZ25vcmVfYnVpbGRfaWRfcDsKKyAKKyAJZmlsZV9kYXRhLnJlZ2lv bnMuZW1wbGFjZV9iYWNrIChzdGFydCwgZW5kLCBmaWxlX29mcyk7CgpkaWZmIC0tZ2l0IGEvZ2Ri LnNwZWMgYi9nZGIuc3BlYwppbmRleCAzM2MxNGQ2Li4wYzRkMWE3IDEwMDY0NAotLS0gYS9nZGIu c3BlYworKysgYi9nZGIuc3BlYwpAQCAtNDUsNyArNDUsNyBAQCBWZXJzaW9uOiAxNy4yCiAKICMg VGhlIHJlbGVhc2UgYWx3YXlzIGNvbnRhaW5zIGEgbGVhZGluZyByZXNlcnZlZCBudW1iZXIsIHN0 YXJ0IGl0IGF0IDEuCiAjIGB1cHN0cmVhbScgaXMgbm90IGEgcGFydCBvZiBgbmFtZScgdG8gc3Rh eSBmdWxseSBycG0gZGVwZW5kZW5jaWVzIGNvbXBhdGlibGUgZm9yIHRoZSB0ZXN0aW5nLgotUmVs ZWFzZTogMSV7P2Rpc3R9CitSZWxlYXNlOiAyJXs/ZGlzdH0KIAogTGljZW5zZTogR1BMLTMuMC1v ci1sYXRlciBBTkQgQlNELTMtQ2xhdXNlIEFORCBGU0ZBUCBBTkQgTEdQTC0yLjEtb3ItbGF0ZXIg QU5EIEdQTC0yLjAtb3ItbGF0ZXIgQU5EIExHUEwtMi4wLW9yLWxhdGVyIEFORCBMaWNlbnNlUmVm LUZlZG9yYS1QdWJsaWMtRG9tYWluIEFORCBHRkRMLTEuMy1vci1sYXRlciBBTkQgTEdQTC0yLjAt b3ItbGF0ZXIgV0lUSCBHQ0MtZXhjZXB0aW9uLTIuMCBBTkQgR1BMLTMuMC1vci1sYXRlciBXSVRI IEdDQy1leGNlcHRpb24tMy4xIEFORCBHUEwtMi4wLW9yLWxhdGVyIFdJVEggR05VLWNvbXBpbGVy LWV4Y2VwdGlvbiBBTkQgTUlUCiAjIERvIG5vdCBwcm92aWRlIFVSTCBmb3Igc25hcHNob3RzIGFz IHRoZSBmaWxlIGxhc3RzIHRoZXJlIG9ubHkgZm9yIDIgZGF5cy4KQEAgLTkzNCw2ICs5MzQsMTAg QEAgZmkKIAogJWNoYW5nZWxvZwogKiBXZWQgSnVsIDggMjAyNiBBbmRyZXcgQnVyZ2VzcyA8YWJ1 cmdlc3NAcmVkaGF0LmNvbT4KKy0gQmFja3BvcnQgdXBzdHJlYW0gY29tbWl0IDkzZjUzNmQ4MTNj NDE1MjcgdG8gZml4IFJIQlogMjQ5ODAzNC4gIFRoaXMKKyAgY29tbWl0IHdpbGwgZHJvcCBvdXQg d2hlbiB3ZSByZWJhc2UgdG8gR0RCIDE4LgorCisqIFdlZCBKdWwgOCAyMDI2IEFuZHJldyBCdXJn ZXNzIDxhYnVyZ2Vzc0ByZWRoYXQuY29tPgogLSBCYWNrcG9ydCB1cHN0cmVhbSBjb21taXQgYmUz YTk0MDVjZWI0ZDZkNiB0byBmaXggYW5kIGlzc3VlIHdpdGggdGhlCiAgIEQgZGVtYW5nbGVyIChS SEJaIDIzNjgzNTApLiAgVGhpcyBjb21taXQgd2lsbCBkcm9wIG91dCB3aGVuIHdlCiAgIHJlYmFz ZSB0byBHREIgMTguCg==