[all-commits] [llvm/llvm-project] 5b8402: [lldb][Mach-O] Bound export-trie symbol name lengt...

[Yao Qi via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 5b8402744696bd1e6bb6849e87bd63c7401e4791
      https://github.com/llvm/llvm-project/commit/5b8402744696bd1e6bb6849e87bd63c7401e4791
  Author: Yao Qi <qiyaoltc at gmail.com>
  Date:   2026-06-10 (Wed, 10 Jun 2026)

  Changed paths:
    M lldb/source/Plugins/ObjectFile/Mach-O/MachOTrie.cpp
    M lldb/unittests/ObjectFile/MachO/MachOTrieTest.cpp

  Log Message:
  -----------
  [lldb][Mach-O] Bound export-trie symbol name length (#202947)

`ParseTrieEntries` assembles a symbol name by appending every edge label
along a trie path into a `std::string`. A corrupt export trie can encode
an edge label whose terminator is far away in the trie data, making a
single label many megabytes long. Appending it requests an unbounded
allocation, which can crash lldb while parsing the symbol table.

Reject a trie whose assembled name exceeds a sane bound (1 MiB) as
corrupt data, the same way an unterminated edge label is already
handled. Add a unit test covering an oversized edge label.

Assisted-by: Claude



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications