Out-of-bounds read exists in the function modifySoname

yairKoskas · Ericson2314 · commit df161c6a38a8 · 2025-08-12T23:05:36.000-04:00
(cherry picked from commit e9d3394)
diff --git a/src/patchelf.cc b/src/patchelf.cc
@@ -1132,6 +1132,7 @@ void ElfFile<ElfFileParamNames>::modifySoname(sonameMode op, const std::string &
         if (rdi(dyn->d_tag) == DT_SONAME) {
             dynSoname = dyn;
             soname = strTab + rdi(dyn->d_un.d_val);
+            checkPointer(fileContents, strTab, rdi(dyn->d_un.d_val));
         }
     }
 

Original file line number	Diff line number	Diff line change
`@@ -1132,6 +1132,7 @@ void ElfFile<ElfFileParamNames>::modifySoname(sonameMode op, const std::string &`
`1132`	`1132`	`if (rdi(dyn->d_tag) == DT_SONAME) {`
`1133`	`1133`	`dynSoname = dyn;`
`1134`	`1134`	`soname = strTab + rdi(dyn->d_un.d_val);`
	`1135`	`+ checkPointer(fileContents, strTab, rdi(dyn->d_un.d_val));`
`1135`	`1136`	`}`
`1136`	`1137`	`}`
`1137`	`1138`