GDB, the GNU Debugger, is a powerful tool for debugging programs. A recent vulnerability, CVE-2023-39128, involves a stack-buffer overflow in GDB's Ada name-decoding routine (ada_decode in gdb/ada-lang.c). This flaw can crash the debugger when processing crafted Ada-encoded symbol names, leading to denial-of-service on development and CI systems. The vulnerability is local in scope and has been patched upstream and by major Linux distributors. Discussions on WindowsForum cover the patch and mitigation strategies for this issue, highlighting the importance of keeping GDB updated to avoid disruptions in debugging workflows.
-
A stack-buffer overflow in GDB’s Ada name-decoding routine — tracked as CVE-2023-39128 — quietly exposed a fragile surface in one of the most widely used debugging tools: a bug in the function ada_decode (file gdb/ada-lang.c) that could crash the debugger and force denial-of-service on...