[Bug binutils/25822] New: Invalid read in process_symbol_table()

[nguyenmanhdung1710 at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=25822

            Bug ID: 25822
           Summary: Invalid read in process_symbol_table()
           Product: binutils
           Version: 2.35 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: nguyenmanhdung1710 at gmail dot com
  Target Milestone: ---

Created attachment 12457
  --> https://sourceware.org/bugzilla/attachment.cgi?id=12457&action=edit
PoC for an invalid read

Hi,

An invalid read was discovered in readelf (the latest commit c98a454) in
process_symbol_table(), that can cause a denial of service, via a crafted file.

To reproduce: readelf -a PoC

ASAN says:
==21088==ERROR: AddressSanitizer: SEGV on unknown address 0x000000006800 (pc
0x000000441f8e bp 0x7ffcee26c560 sp 0x7ffcee26c3f0 T0)
    #0 0x441f8d in process_symbol_table ../../binutils/readelf.c:12155
    #1 0x4619d2 in process_object ../../binutils/readelf.c:20124
    #2 0x463527 in process_file ../../binutils/readelf.c:20602
    #3 0x463941 in main ../../binutils/readelf.c:20671
    #4 0x7ff3d199a82f in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #5 0x402808 in _start
(/home/dungnguyen/PoCs/readelf_f717994/readelf_c98a454+0x402808)

Thanks,
Manh Dung

-- 
You are receiving this mail because:
You are on the CC list for the bug.