Blame SOURCES/binutils-CVE-2018-7642.patch

381f6c
--- binutils.orig/bfd/aoutx.h	2018-04-26 15:14:18.411450291 +0100
381f6c
+++ binutils-2.30/bfd/aoutx.h	2018-04-26 17:22:38.328770529 +0100
381f6c
@@ -2283,10 +2283,12 @@ NAME (aout, swap_std_reloc_in) (bfd *abf
381f6c
   if (r_baserel)
381f6c
     r_extern = 1;
381f6c
 
381f6c
-  if (r_extern && r_index > symcount)
381f6c
+  if (r_extern && r_index >= symcount)
381f6c
     {
381f6c
       /* We could arrange to return an error, but it might be useful
381f6c
-	 to see the file even if it is bad.  */
381f6c
+	 to see the file even if it is bad.  FIXME: Of course this
381f6c
+	 means that objdump -r *doesn't* see the actual reloc, and
381f6c
+	 objcopy silently writes a different reloc.  */
381f6c
       r_extern = 0;
381f6c
       r_index = N_ABS;
381f6c
     }