From 09121c680b2ebb4d8cc5a12f2ad14e0b38c6c6af Mon Sep 17 00:00:00 2001 From: Gabriel Barrantes Date: Sat, 7 Jun 2025 18:00:26 -0600 Subject: [PATCH] Add missing types in types[] array The types[] array in outdbg.c was missing entries for "oword", "yword", and "zword", leading to potential out-of-bounds access. This patch adds the missing types to prevent the buffer overflow and ensure correct debug information generation. Fixes: #3392814 CVE: CVE-2022-46456 Signed-off-by: Gabriel Barrantes --- output/outdbg.c | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/output/outdbg.c b/output/outdbg.c index e7a9a4e5e..a6ad680d2 100644 --- a/output/outdbg.c +++ b/output/outdbg.c @@ -409,8 +409,19 @@ dbg_pragma(const struct pragma *pragma) } static const char * const types[] = { - "unknown", "label", "byte", "word", "dword", "float", "qword", "tbyte" + "unknown", + "label", + "byte", + "word", + "dword", + "float", + "qword", + "tbyte", + "oword", + "yword", + "zword", }; + static void dbgdbg_init(void) { fprintf(ofile, "dbg init: debug information enabled\n");