[Bug binutils/17512] libbfd/binutils: crashes on fuzzed samples

[cherepan at mccme dot ru]

https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #196 from Alexander Cherepanov <cherepan at mccme dot ru> ---
Created attachment 8109
  --> https://sourceware.org/bugzilla/attachment.cgi?id=8109&action=edit
Problems with `objdump -afphxgGtTrRwW --special-syms` (32-bit) -- ubsan

Similar to https://sourceware.org/bugzilla/show_bug.cgi?id=17531#c82 but for
objdump.

----------------------------------------------------------------------

ubsan

Files: 6
Errors:
      1 ../../../source/bfd/coffcode.h:1195:32: runtime error: negation of ...
cannot be represented in type 'long int'; cast to an unsigned type to negate
this value to itself
      1 ../../../source/binutils/dwarf.c:2771:3: runtime error: variable length
array bound evaluates to non-positive value ...
      1 ../../../source/binutils/dwarf.c:279:45: runtime error: shift exponent
... is too large for 64-bit type 'long long unsigned int'
      1 ../../../source/binutils/dwarf.c:451:7: runtime error: variable length
array bound evaluates to non-positive value ...
      1 ../../../source/binutils/dwarf.c:5884:6: runtime error: variable length
array bound evaluates to non-positive value ...
      1 peigen.c:2227:22: runtime error: signed integer overflow: ... + ...
cannot be represented in type 'long int'

-- 
You are receiving this mail because:
You are on the CC list for the bug.