[Bug binutils/22398] New: setup_group NULL SEGV in objdump

[jgj212 at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=22398

            Bug ID: 22398
           Summary: setup_group  NULL SEGV  in objdump
           Product: binutils
           Version: 2.29
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: jgj212 at gmail dot com
  Target Milestone: ---

Created attachment 10573
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10573&action=edit
poc-segv-setup_group

I found a  NULL segv in objdum 2.29. Here is the asan report:
=================================================================
==988==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000008 (pc
0x0000006d9027 bp 0x7fff55af8850 sp 0x7fff55af8370 T0)
==988==The signal is caused by a READ memory access.
==988==Hint: address points to the zero page.
    #0 0x6d9026 in setup_group bfd/elf.c:756:19
    #1 0x6d4a74 in _bfd_elf_make_section_from_shdr bfd/elf.c:1020:10
    #2 0x6ea227 in bfd_section_from_shdr  bfd/elf.c:2436:12
    #3 0x6d826a in setup_group  bfd/elf.c:643:24
    #4 0x6d4a74 in _bfd_elf_make_section_from_shdr  bfd/elf.c:1020:10
    #5 0x6e4f8d in bfd_section_from_shdr  bfd/elf.c:2028:13
    #6 0x6c189d in bfd_elf64_object_p  bfd/./elfcode.h:805:7
    #7 0x64525c in bfd_check_format_matches  bfd/format.c:311:14
    #8 0x5178cf in display_object_bfd  binutils/./objdump.c:3601:7
    #9 0x5177d9 in display_any_bfd  binutils/./objdump.c:3692:5
    #10 0x51731a in display_file  binutils/./objdump.c:3713:3
    #11 0x516b74 in main  binutils/./objdump.c:4015:6
    #12 0x7f8e3d22ef44 in __libc_start_main
/build/eglibc-oGUzwX/eglibc-2.19/csu/libc-start.c:287
    #13 0x41b7bb in _start ( binutils/objdump+0x41b7bb)

-- 
You are receiving this mail because:
You are on the CC list for the bug.