[Bug binutils/17512] libbfd/binutils: crashes on fuzzed samples

[cherepan at mccme dot ru]

https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #208 from Alexander Cherepanov <cherepan at mccme dot ru> ---
Created attachment 8135
  --> https://sourceware.org/bugzilla/attachment.cgi?id=8135&action=edit
Problems with `readelf -agteAruhlsSdIncVWw --dyn-syms` (32-bit)

ubsan

Files: 6
Errors:
      1 ../../../source/binutils/dwarf.c:4722:31: runtime error: signed integer
overflow: ... - ... cannot be represented in type 'int'
      1 ../../../source/binutils/dwarf.c:5924:6: runtime error: variable length
array bound evaluates to non-positive value ...
      1 ../../../source/binutils/dwarf.c:6474:3: runtime error: signed integer
overflow: ... * ... cannot be represented in type 'int'
      1 ../../../source/binutils/dwarf.c:6480:29: runtime error: signed integer
overflow: ... * ... cannot be represented in type 'int'
      1 ../../../source/binutils/dwarf.c:6503:40: runtime error: signed integer
overflow: ... * ... cannot be represented in type 'int'
      1 ../../../source/binutils/dwarf.c:6512:40: runtime error: signed integer
overflow: ... * ... cannot be represented in type 'int'
      1 ../../../source/binutils/dwarf.c:7029:37: runtime error: signed integer
overflow: ... - ... cannot be represented in type 'int'
      1 ../../../source/binutils/readelf.c:15081:46: runtime error: signed
integer overflow: ... - ... cannot be represented in type 'int'
      1 ../../../source/binutils/readelf.c:15113:38: runtime error: signed
integer overflow: ... - ... cannot be represented in type 'int'

-- 
You are receiving this mail because:
You are on the CC list for the bug.