[Bug ld/24339] New: An Invalid Memory Address Dereference problem was discovered in function elf_x86_64_check_relocs in elf64-x86-64.c in bfd

[wcventure at 126 dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=24339

            Bug ID: 24339
           Summary: An Invalid Memory Address Dereference problem was
                    discovered in function elf_x86_64_check_relocs in
                    elf64-x86-64.c in bfd
           Product: binutils
           Version: 2.32
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: ld
          Assignee: unassigned at sourceware dot org
          Reporter: wcventure at 126 dot com
  Target Milestone: ---

Created attachment 11679
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11679&action=edit
POC

Hi, there.

An Invalid Memory Address Dereference problem was discovered in function
elf_x86_64_check_relocs in elf64-x86-64.c in bfd of binutils 2.32 the latest
code base. A crafted ELF input can cause segment faults and I have confirmed
them with address sanitizer too.

Please use the "./ld -E $POC" to reproduce the bug.

> ASAN:DEADLYSIGNAL
> =================================================================
> ==703==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000018 (pc 
> 0x000000715ef0 bp 0x7ffd5bdeb9c0 sp 0x7ffd5bdeb720 T0)
>     #0 0x715eef in elf_x86_64_check_relocs 
> /binutils_2.32/bfd/elf64-x86-64.c:1902:19
>     #1 0x820bd6 in _bfd_elf_link_check_relocs 
> /binutils_2.32/bfd/elflink.c:3849:9
>     #2 0x555a6c in lang_check_relocs /binutils_2.32/ld/ldlang.c:7327:7
>     #3 0x555a6c in lang_process /binutils_2.32/ld/ldlang.c:7538
>     #4 0x58fb7f in main /binutils_2.32/ld/./ldmain.c:440:3
>     #5 0x7fe8de9fc82f in __libc_start_main 
> /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
>     #6 0x4195f8 in _start (/binutils_2.32/build/bin/ld+0x4195f8)
> 
> AddressSanitizer can not provide additional info.
> SUMMARY: AddressSanitizer: SEGV /binutils_2.32/bfd/elf64-x86-64.c:1902:19 in 
> elf_x86_64_check_relocs
> ==703==ABORTING
> Aborted

-- 
You are receiving this mail because:
You are on the CC list for the bug.