INCOMPLETE: ban DWARF v5

Cargo.toml

@@ -12,6 +12,7 @@ clap = "4.2.5"
 duct = "0.13.6"
 flate2 = "1.0.26"
 futures = "0.3.28"
+gimli = "0.27.2"
 goblin = "0.6.1"
 hex = "0.4.3"
 object = "0.31.0"

src/validation.rs

@@ -17,10 +17,11 @@ use {
             macho::{LoadCommandVariant, MachHeader, Nlist},
             pe::{ImageNtHeaders, PeFile, PeFile32, PeFile64},
         },
-        Endianness, FileKind, Object, SectionIndex, SymbolScope,
+        Endian, Endianness, FileKind, Object, SectionIndex, SymbolScope,
     },
     once_cell::sync::Lazy,
     std::{
+        borrow::Cow,
         collections::{BTreeSet, HashMap},
         convert::TryInto,
         io::Read,
@@ -990,6 +991,48 @@ fn validate_elf<'data, Elf: FileHeader<Endian = Endianness>>(
         }
     }
 
+    // Look at DWARF debug info.
+
+    let load_section = |id: gimli::SectionId| -> Result<Cow<[u8]>, gimli::Error> {
+        match sections.section_by_name(endian, id.name().as_ref()) {
+            Some((_, section)) => {
+                // TODO handle compression.
+                Ok(section
+                    .data(endian, data)
+                    .map(Cow::Borrowed)
+                    .unwrap_or(Cow::Borrowed(&[][..])))
+            }
+            None => Ok(Cow::Borrowed(&[][..])),
+        }
+    };
+
+    let dwarf_cow = gimli::Dwarf::load(&load_section)?;
+
+    let borrow_section: &dyn for<'a> Fn(
+        &'a Cow<[u8]>,
+    ) -> gimli::EndianSlice<'a, gimli::RunTimeEndian> = &|section| {
+        gimli::EndianSlice::new(
+            &*section,
+            if endian.is_big_endian() {
+                gimli::RunTimeEndian::Big
+            } else {
+                gimli::RunTimeEndian::Little
+            },
+        )
+    };
+
+    let dwarf = dwarf_cow.borrow(&borrow_section);
+
+    let mut iter = dwarf.units();
+    while let Some(header) = iter.next()? {
+        if header.version() > 4 {
+            context
+                .errors
+                .push(format!("{} has DWARF newer than version 4", path.display()));
+            break;
+        }
+    }
+
     Ok(())
 }