[Bug binutils/21813] New: Additional undefined behavior and crashes

[ned at forallsecure dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=21813

            Bug ID: 21813
           Summary: Additional undefined behavior and crashes
           Product: binutils
           Version: 2.30 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: ned at forallsecure dot com
  Target Milestone: ---

Created attachment 10281
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10281&action=edit
5 testcases with asan output

I've found 5 more bugs in objdump master branch.

These bugs repro for me when building for all targets with a recent version of
clang and AddressSanitizer and running them with `./objdump -xg testcase` (one
crash requires debug output).

If any don't reproduce, let me know and I can try to identify another testcase
or help identify the root cause. I've included `asan_output` with my stacktrace
for each test.

I have investigated alpha-heap-overflow, and there the fix is to check that
`PRIV (recrd.rec_size) > test_len` before reading the remaining record.

Cheers,
Ned

-- 
You are receiving this mail because:
You are on the CC list for the bug.