[qt/qt-creator/elfutils]: Summary of bulk changes made

Git repository change summary for qt/qt-creator/elfutils
Pushed by mirror-service into branch 'upstream/main'.
Changed from 27d4734003bd5578a05d45aa428b954cdf962128 to 0845f5cea2abb66b9d29a739941bd7737f6244b4
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 0845f5cea2abb66b9d29a739941bd7737f6244b4 by Mark Wielaard (on behalf of Sayed Kaif) on 23/07/2026 at 22:32..
libdw: Fix out-of-bounds read for oversized .debug_line header_length

read_line_header parses the DWARF line program header but never checks
the header_length field against the bounds of the unit.  read_srcfiles
then does

  lineendp = lh->header_start + lh->header_length;

and uses that pointer as the upper bound while scanning the directory and
file-name tables (and read_srclines similarly computes
lh->header_start + lh->header_length as the start of the line program).

A .debug_line unit whose header_length is larger than the remaining unit
data therefore makes lineendp point past the end of the section, and the
directory scan reads out of bounds:

  ERROR: AddressSanitizer: heap-buffer-overflow ... READ of size 2
    #0 __interceptor_memchr
    #1 read_srcfiles libdw/dwarf_getsrclines.c:373
    #2 get_lines_or_files libdw/dwarf_getsrclines.c:1353
    #3 __libdw_getsrcfiles libdw/dwarf_getsrclines.c:1425
    #4 dwarf_getsrcfiles libdw/dwarf_getsrcfiles.c:105
  0 bytes to the right of 17-byte region

header_length counts the bytes from directly after the field to the
start of the line number program, so it must fit within the unit (which
read_line_header has already bounded to the section via unit_length).
Reject a header_length that exceeds the remaining unit bytes, turning the
crafted input into a clean DWARF_E_INVALID_DEBUG_LINE error.  Valid
DWARF is unaffected.

Signed-off-by: Sayed Kaif <[email protected]>
https://invent.kde.org/qt/qt-creator/elfutils/-/commit/0845f5cea2abb66b9d29a739941bd7737f6244b4