[Bug binutils/23062] New: Crash in readelf (assertion failure)

[thuanpv at comp dot nus.edu.sg]

https://sourceware.org/bugzilla/show_bug.cgi?id=23062

            Bug ID: 23062
           Summary: Crash in readelf (assertion failure)
           Product: binutils
           Version: 2.31 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: thuanpv at comp dot nus.edu.sg
  Target Milestone: ---

Created attachment 10949
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10949&action=edit
crash-inducing sample file

Dear all,

This bug was found with AFLSmart, an extension of AFL. Thanks also to Marcel
Böhme, Andrew Santosa and Alexandru Razvan Caciulescu. 

This bug was found on Ubuntu 16.04 64-bit & binutils was checked out from main
repository at git://sourceware.org/git/binutils-gdb.git. Its commit is
68e91e42492551e165b103d819c021c4953da10b (April 14 2018) 

To reproduce:
Download the attached file - crash1
readelf -w crash1

Error message:
readelf: Warning: Unrecognized form: 36
readelf: Warning: Unsupported form (DW_FORM_ref_sup8) for attribute
DW_AT_dwo_name
readelf: Warning: Unrecognized form: 0
readelf: dwarf.c:2180: read_and_display_attr_value: Assertion
`debug_info_p->num_loc_offsets - debug_info_p->num_loc_views <= 1' failed.
Aborted


Valgrind says:

readelf: dwarf.c:2180: read_and_display_attr_value: Assertion
`debug_info_p->num_loc_offsets - debug_info_p->num_loc_views <= 1' failed.
==9419== 
==9419== Process terminating with default action of signal 6 (SIGABRT)
==9419==    at 0x4E6F428: raise (raise.c:54)
==9419==    by 0x4E71029: abort (abort.c:89)
==9419==    by 0x4E67BD6: __assert_fail_base (assert.c:92)
==9419==    by 0x4E67C81: __assert_fail (assert.c:101)
==9419==    by 0x500914: read_and_display_attr_value (dwarf.c:2179)
==9419==    by 0x5198D3: read_and_display_attr (dwarf.c:2687)
==9419==    by 0x5198D3: process_debug_info (dwarf.c:3197)
==9419==    by 0x573F76: load_separate_debug_file (dwarf.c:9917)
==9419==    by 0x4C4C1E: process_object (readelf.c:18680)
==9419==    by 0x404841: process_file (readelf.c:19104)
==9419==    by 0x404841: main (readelf.c:19163)


Thanks,

Thuan

-- 
You are receiving this mail because:
You are on the CC list for the bug.