0e219f4
--- binutils.orig/bfd/dwarf2.c	2018-07-11 11:45:09.491030059 +0100
0e219f4
+++ binutils-2.29/bfd/dwarf2.c	2018-07-11 12:16:12.975943400 +0100
0e219f4
@@ -626,14 +626,24 @@ read_8_bytes (bfd *abfd, bfd_byte *buf,
0e219f4
 }
0e219f4
 
0e219f4
 static bfd_byte *
0e219f4
-read_n_bytes (bfd *abfd ATTRIBUTE_UNUSED,
0e219f4
-	      bfd_byte *buf,
0e219f4
-	      bfd_byte *end,
0e219f4
-	      unsigned int size ATTRIBUTE_UNUSED)
0e219f4
-{
0e219f4
-  if (buf + size > end)
0e219f4
-    return NULL;
0e219f4
-  return buf;
0e219f4
+read_n_bytes (bfd_byte *           buf,
0e219f4
+	      bfd_byte *           end,
0e219f4
+	      struct dwarf_block * block)
0e219f4
+{
0e219f4
+  unsigned int  size = block->size;
0e219f4
+  bfd_byte *    block_end = buf + size;
0e219f4
+
0e219f4
+  if (block_end > end || block_end < buf)
0e219f4
+    {
0e219f4
+      block->data = NULL;
0e219f4
+      block->size = 0;
0e219f4
+      return end;
0e219f4
+    }
0e219f4
+  else
0e219f4
+    {
0e219f4
+      block->data = buf;
0e219f4
+      return block_end;
0e219f4
+    }
0e219f4
 }
0e219f4
 
0e219f4
 /* Scans a NUL terminated string starting at BUF, returning a pointer to it.
0e219f4
@@ -1131,8 +1141,7 @@ read_attribute_value (struct attribute *
0e219f4
 	return NULL;
0e219f4
       blk->size = read_2_bytes (abfd, info_ptr, info_ptr_end);
0e219f4
       info_ptr += 2;
0e219f4
-      blk->data = read_n_bytes (abfd, info_ptr, info_ptr_end, blk->size);
0e219f4
-      info_ptr += blk->size;
0e219f4
+      info_ptr = read_n_bytes (info_ptr, info_ptr_end, blk);
0e219f4
       attr->u.blk = blk;
0e219f4
       break;
0e219f4
     case DW_FORM_block4:
0e219f4
@@ -1142,8 +1151,7 @@ read_attribute_value (struct attribute *
0e219f4
 	return NULL;
0e219f4
       blk->size = read_4_bytes (abfd, info_ptr, info_ptr_end);
0e219f4
       info_ptr += 4;
0e219f4
-      blk->data = read_n_bytes (abfd, info_ptr, info_ptr_end, blk->size);
0e219f4
-      info_ptr += blk->size;
0e219f4
+      info_ptr = read_n_bytes (info_ptr, info_ptr_end, blk);
0e219f4
       attr->u.blk = blk;
0e219f4
       break;
0e219f4
     case DW_FORM_data2:
0e219f4
@@ -1183,8 +1191,7 @@ read_attribute_value (struct attribute *
0e219f4
       blk->size = _bfd_safe_read_leb128 (abfd, info_ptr, &bytes_read,
0e219f4
 					 FALSE, info_ptr_end);
0e219f4
       info_ptr += bytes_read;
0e219f4
-      blk->data = read_n_bytes (abfd, info_ptr, info_ptr_end, blk->size);
0e219f4
-      info_ptr += blk->size;
0e219f4
+      info_ptr = read_n_bytes (info_ptr, info_ptr_end, blk);
0e219f4
       attr->u.blk = blk;
0e219f4
       break;
0e219f4
     case DW_FORM_block1:
0e219f4
@@ -1194,8 +1201,7 @@ read_attribute_value (struct attribute *
0e219f4
 	return NULL;
0e219f4
       blk->size = read_1_byte (abfd, info_ptr, info_ptr_end);
0e219f4
       info_ptr += 1;
0e219f4
-      blk->data = read_n_bytes (abfd, info_ptr, info_ptr_end, blk->size);
0e219f4
-      info_ptr += blk->size;
0e219f4
+      info_ptr = read_n_bytes (info_ptr, info_ptr_end, blk);
0e219f4
       attr->u.blk = blk;
0e219f4
       break;
0e219f4
     case DW_FORM_data1: