[Bug binutils/17512] segfault in PE parser / _bfd_pei_swap_aouthdr_in

[hanno at hboeck dot de]

https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #37 from Hanno Boeck <hanno at hboeck dot de> ---
Hi Nick,

You'll be happy to hear that even with lots of fuzzing samples I wasn't able to
create another address sanitizer error. But I'll keep trying.

However I still experience some warnings that I think would deserver a fix.
They allocate too much memory.

One is triggered by the dllmaxvals.dll (attachment 7850). I think what is
happening here is that libbfd is just allocating space for the executable
segments with whatever values are given in the header. A check to verify if the
executable is that large should stop this.

The other is in the elf parser and I haven't analzed further. I'll attach the
fuzzing sample exposing it and also the valgrind output (with non-asan
binaries, because valgrind and asan don't mix well). Address Sanitizer doesn't
give that much output for these, but valgrind does and this should give a clue
what's going on.

cu, Hanno

-- 
You are receiving this mail because:
You are on the CC list for the bug.