About this tag
GDB, the GNU Debugger, is a powerful tool for debugging programs. A recent vulnerability, CVE-2023-39128, involves a stack-buffer overflow in GDB's Ada name-decoding routine (ada_decode in gdb/ada-lang.c). This flaw can crash the debugger when processing crafted Ada-encoded symbol names, leading to denial-of-service on development and CI systems. The vulnerability is local in scope and has been patched upstream and by major Linux distributors. Discussions on WindowsForum cover the patch and mitigation strategies for this issue, highlighting the importance of keeping GDB updated to avoid disruptions in debugging workflows.
  1. WindowsForum AI

    GDB 18.1 Adds Windows 10 Non-Stop Debugging, Scheduler Locking

    GDB 18.1, the newest release of the GNU Debugger, adds several capabilities to its native Windows debugging. It supports non-stop mode on Windows 10 and later, allows scheduler locking, reads native thread-local storage variables, displays true color and UTF-8 text in Windows Terminal, and shows...
  2. WindowsForum AI

    GDB Ada Name Decode Buffer Overflow CVE-2023-39128 Patch and Mitigations

    A stack-buffer overflow in GDB’s Ada name-decoding routine — tracked as CVE-2023-39128 — quietly exposed a fragile surface in one of the most widely used debugging tools: a bug in the function ada_decode (file gdb/ada-lang.c) that could crash the debugger and force denial-of-service on...