[Bug ld/15957] New: heap corruption when linking against specific MSVC import library

[sthalik at misaki dot pl]

https://sourceware.org/bugzilla/show_bug.cgi?id=15957

            Bug ID: 15957
           Summary: heap corruption when linking against specific MSVC
                    import library
           Product: binutils
           Version: 2.24 (HEAD)
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ld
          Assignee: unassigned at sourceware dot org
          Reporter: sthalik at misaki dot pl

GNU ld (GNU Binutils) 2.23.52.20130914

==24608== Memcheck, a memory error detector
==24608== Copyright (C) 2002-2012, and GNU GPL'd, by Julian Seward et al.
==24608== Using Valgrind-3.8.1 and LibVEX; rerun with -h for copyright info
==24608== Command: /usr/libexec/gcc/i686-w64-mingw32/ld
--sysroot=/usr/i686-w64-mingw32 -m i386pe --shared -Bdynamic -e
address@hidden --enable-auto-image-base -o libopentrack-proto-fsuipc.dll
/usr/i686-w64-mingw32/mingw/lib/../lib/dllcrt2.o
/usr/lib/gcc/i686-w64-mingw32/4.9.0-pre9999/crtbegin.o
-L/mnt/ntfs/Users/Administrator/Projects/fsuipc
-L/usr/lib/gcc/i686-w64-mingw32/4.9.0-pre9999
-L/usr/i686-w64-mingw32/mingw/lib/../lib -L/usr/i686-w64-mingw32/mingw/lib
--out-implib libopentrack-proto-fsuipc.dll.a --major-image-version 0
--minor-image-version 0 --whole-archive
CMakeFiles/opentrack-proto-fsuipc.dir/objects.a --no-whole-archive
/home/sthalik/dev/qt-install-mingw-w64/lib/QtCore4.dll
/home/sthalik/dev/qt-install-mingw-w64/lib/libQtGui4.a
/home/sthalik/dev/qt-install-mingw-w64/lib/libQtNetwork4.a
/home/sthalik/dev/qt-install-mingw-w64/lib/libQtXml4.a
/mnt/ntfs/Users/Administrator/Projects/fsuipc/FSUIPC_User.lib -lkernel32
-luser32 -lgdi32 -lwinspool -lshell32 -lole32 -loleaut32 -luuid -lcomdlg32
-ladvapi32 -lstdc++ -lmingw32 -lgcc_s -lgcc -lmoldname -lmingwex -lmsvcrt
-ladvapi32 -lshell32 -luser32 -lkernel32 -lmingw32 -lgcc_s -lgcc -lmoldname
-lmingwex -lmsvcrt /usr/lib/gcc/i686-w64-mingw32/4.9.0-pre9999/crtend.o
==24608== 
[snip false positives from GNU libc]
==24608== Invalid read of size 1
==24608==    at 0x425710: def_file_add_directive (deffilep.y:939)
==24608==    by 0x42A570: pe_dll_build_sections (pe-dll.c:667)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608==  Address 0x76c9de8 is 0 bytes after a block of size 88 alloc'd
==24608==    at 0x4C2B03B: malloc (vg_replace_malloc.c:270)
==24608==    by 0x4ED7397: xmalloc (xmalloc.c:147)
==24608==    by 0x42A548: pe_dll_build_sections (pe-dll.c:664)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608== 
==24608== Invalid write of size 1
==24608==    at 0x425720: def_file_add_directive (deffilep.y:940)
==24608==    by 0x42A570: pe_dll_build_sections (pe-dll.c:667)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608==  Address 0x76c9de8 is 0 bytes after a block of size 88 alloc'd
==24608==    at 0x4C2B03B: malloc (vg_replace_malloc.c:270)
==24608==    by 0x4ED7397: xmalloc (xmalloc.c:147)
==24608==    by 0x42A548: pe_dll_build_sections (pe-dll.c:664)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608== 
Warning: .drectve `==24608== Invalid read of size 1
==24608==    at 0x4C2BA84: strlen (mc_replace_strmem.c:399)
==24608==    by 0x537FF2D: fputs (iofputs.c:35)
==24608==    by 0x41C790: vfinfo (stdio2.h:97)
==24608==    by 0x41D362: einfo (ldmisc.c:466)
==24608==    by 0x425735: def_file_add_directive (deffilep.y:942)
==24608==    by 0x42A570: pe_dll_build_sections (pe-dll.c:667)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608==  Address 0x76c9de8 is 0 bytes after a block of size 88 alloc'd
==24608==    at 0x4C2B03B: malloc (vg_replace_malloc.c:270)
==24608==    by 0x4ED7397: xmalloc (xmalloc.c:147)
==24608==    by 0x42A548: pe_dll_build_sections (pe-dll.c:664)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608== 
/DEFAULTLIB:"uuid.lib" /DEFAULTLIB:"uuid.lib" /DEFAULTLIB:"LIBC"
/DEFAULTLIB:"OLDNAMES" ' unrecognized
==24608== Invalid write of size 1
==24608==    at 0x425736: def_file_add_directive (deffilep.y:943)
==24608==    by 0x42A570: pe_dll_build_sections (pe-dll.c:667)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608==  Address 0x76c9de8 is 0 bytes after a block of size 88 alloc'd
==24608==    at 0x4C2B03B: malloc (vg_replace_malloc.c:270)
==24608==    by 0x4ED7397: xmalloc (xmalloc.c:147)
==24608==    by 0x42A548: pe_dll_build_sections (pe-dll.c:664)
==24608==    by 0x42236D: gld_i386pe_after_open (ei386pe.c:1229)
==24608==    by 0x415444: lang_process (ldlang.c:6670)
==24608==    by 0x40491F: main (ldmain.c:411)
==24608== 
==24608== Syscall param write(buf) points to uninitialised byte(s)
==24608==    at 0x53EEF70: __write_nocancel (syscall-template.S:81)
==24608==    by 0x538A912: _IO_file_write@@GLIBC_2.2.5 (fileops.c:1254)
==24608==    by 0x538A7F1: new_do_write (fileops.c:530)
==24608==    by 0x538BB7F: _IO_do_write@@GLIBC_2.2.5 (fileops.c:503)
==24608==    by 0x538C7EE: _IO_switch_to_get_mode (genops.c:184)
==24608==    by 0x538AA27: _IO_file_seekoff@@GLIBC_2.2.5 (fileops.c:961)
==24608==    by 0x5388DD6: fseeko (fseeko.c:39)
==24608==    by 0x4E66086: bfd_seek (bfdio.c:325)
==24608==    by 0x4E8DED8: coff_set_section_contents (coffcode.h:4448)
==24608==    by 0x4E6F32F: bfd_set_section_contents (section.c:1468)
==24608==    by 0x4E73CA0: _bfd_default_link_order (linker.c:2706)
==24608==    by 0x4E8C1BC: _bfd_coff_final_link (cofflink.c:940)
==24608==  Address 0x404d200 is not stack'd, malloc'd or (recently) free'd

-- 
You are receiving this mail because:
You are on the CC list for the bug.