[Bug binutils/23674] New: Another stack overflow problem in c++filt

[wcventure at 126 dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=23674

            Bug ID: 23674
           Summary: Another stack overflow problem in c++filt
           Product: binutils
           Version: 2.32 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: wcventure at 126 dot com
  Target Milestone: ---

Created attachment 11251
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11251&action=edit
c++filt < POC1

We have found some stack overflow in c++filt of the latest binutils code base.
Here are the POC files with different kinds of stack overflow.

Please use the “c++filt < POC ” to reproduce the bug.
Please check it and debug it.
Thank you very much.


ASAN output:

(1)binutils-2.31/build/bin$ ./c++filt < POC1

ASAN:DEADLYSIGNAL
=================================================================
==7555==ERROR: AddressSanitizer: stack-overflow on address 0x7fffefbe1f48 (pc
0x0000009566e8 bp 0x7fffefbe2140 sp 0x7fffefbe1f48 T0)
    #0 0x9566e7  (/mnt/d/Project/binutils-2.31/build/bin/c++filt+0x9566e7)
    #1 0xcccf00  (/mnt/d/Project/binutils-2.31/build/bin/c++filt+0xcccf00)

SUMMARY: AddressSanitizer: stack-overflow
(/mnt/d/Project/binutils-2.31/build/bin/c++filt+0x9566e7) 
==7555==ABORTING
Aborted (core dumped)

(2)binutils-2.31/build/bin$ ./c++filt < POC2

ASAN:DEADLYSIGNAL
=================================================================
==14325==ERROR: AddressSanitizer: stack-overflow on address 0x7fffdbe5dff8 (pc
0x7f9d75b4364f bp 0x000000000018 sp 0x7fffdbe5dfe0 T0)
    #0 0x7f9d75b4364e  (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x10364e)
    #1 0x7f9d75b43137  (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x103137)
    #2 0x7f9d75a682b1  (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x282b1)
    #3 0x7f9d75b1eb5a in __interceptor_malloc
(/usr/lib/x86_64-linux-gnu/libasan.so.4+0xdeb5a)
    #4 0x9cad7c in xmalloc xmalloc.c:147
    #5 0x8f22e0 in do_arg cplus-dem.c:4330
    #6 0x8f2d70 in demangle_args cplus-dem.c:4659
    #7 0x8d9039 in demangle_nested_args cplus-dem.c:4713
    #8 0x8d9039 in do_type cplus-dem.c:3719
    #9 0x8f1d39 in do_arg cplus-dem.c:4332
    #10 0x8f2d70 in demangle_args cplus-dem.c:4659
    #11 0x8d9039 in demangle_nested_args cplus-dem.c:4713
    #12 0x8d9039 in do_type cplus-dem.c:3719
    #13 0x8f1d39 in do_arg cplus-dem.c:4332
    #14 0x8f2d70 in demangle_args cplus-dem.c:4659
    #15 0x8d9039 in demangle_nested_args cplus-dem.c:4713
    #16 0x8d9039 in do_type cplus-dem.c:3719
    #17 0x8f1d39 in do_arg cplus-dem.c:4332
    #18 0x8f2d70 in demangle_args cplus-dem.c:4659
    #19 0x8d9039 in demangle_nested_args cplus-dem.c:4713
    #20 0x8d9039 in do_type cplus-dem.c:3719

-- 
You are receiving this mail because:
You are on the CC list for the bug.