diff -up avr-binutils-2.24/binutils-2.24/bfd/elf.c.cve_2014_8504 avr-binutils-2.24/binutils-2.24/bfd/elf.c
diff -up avr-binutils-2.24/binutils-2.24/bfd/peXXigen.c.cve_2014_8504 avr-binutils-2.24/binutils-2.24/bfd/peXXigen.c
--- avr-binutils-2.24/binutils-2.24/bfd/peXXigen.c.cve_2014_8504	2014-11-12 11:19:20.291350505 +0100
+++ avr-binutils-2.24/binutils-2.24/bfd/peXXigen.c	2014-11-12 11:19:20.313350092 +0100
@@ -471,7 +471,6 @@ _bfd_XXi_swap_aouthdr_in (bfd * abfd,
 	a->NumberOfRvaAndSizes = 0;
       }
 
-
     for (idx = 0; idx < a->NumberOfRvaAndSizes; idx++)
       {
         /* If data directory is empty, rva also should be 0.  */
diff -up avr-binutils-2.24/binutils-2.24/bfd/srec.c.cve_2014_8504 avr-binutils-2.24/binutils-2.24/bfd/srec.c
--- avr-binutils-2.24/binutils-2.24/bfd/srec.c.cve_2014_8504	2013-11-04 16:33:37.000000000 +0100
+++ avr-binutils-2.24/binutils-2.24/bfd/srec.c	2014-11-12 11:21:38.853748016 +0100
@@ -248,7 +248,7 @@ srec_bad_byte (bfd *abfd,
     }
   else
     {
-      char buf[10];
+      char buf[40];
 
       if (! ISPRINT (c))
 	sprintf (buf, "\\%03o", (unsigned int) c);
@@ -454,7 +454,7 @@ srec_scan (bfd *abfd)
 	case 'S':
 	  {
 	    file_ptr pos;
-	    char hdr[3];
+	    unsigned char hdr[3];
 	    unsigned int bytes;
 	    bfd_vma address;
 	    bfd_byte *data;