[Bug binutils/25958] New: [objdump] crash with -d flag in linux/raise.c:54

[dkcjd2000 at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=25958

            Bug ID: 25958
           Summary: [objdump] crash with -d flag in linux/raise.c:54
           Product: binutils
           Version: 2.34
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: dkcjd2000 at gmail dot com
  Target Milestone: ---

Created attachment 12516
  --> https://sourceware.org/bugzilla/attachment.cgi?id=12516&action=edit
crash test case

Hello,
Im' currently running my fuzzing technique on binutils 2.34, and I found a
crash on objdump

I build it with gcc 5.4.0 on Ubuntu 16.04

You can reproduce with the following command:
./objdump -d <attached file>

The stack trace of crash is :

Program received signal SIGABRT, Aborted.
0x00007ffff783e428 in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:54
54      ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  0x00007ffff783e428 in __GI_raise (sig=sig@entry=6) at
../sysdeps/unix/sysv/linux/raise.c:54
#1  0x00007ffff784002a in __GI_abort () at abort.c:89
#2  0x00007ffff78807ea in __libc_message (do_abort=do_abort@entry=2,
fmt=fmt@entry=0x7ffff7999ed8 "*** Error in `%s': %s: 0x%s ***\n")
    at ../sysdeps/posix/libc_fatal.c:175
#3  0x00007ffff788937a in malloc_printerr (ar_ptr=<optimized out>,
ptr=<optimized out>, str=0x7ffff7996caf "free(): invalid pointer", action=3)
    at malloc.c:5006
#4  _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at
malloc.c:3867
#5  0x00007ffff788d53c in __GI___libc_free (mem=<optimized out>) at
malloc.c:2968
#6  0x00000000004cb960 in _bfd_coff_free_symbols (abfd=<optimized out>) at
coffgen.c:1782
#7  _bfd_coff_close_and_cleanup (abfd=0x85fce0) at coffgen.c:3180
#8  0x000000000046132a in bfd_close_all_done (abfd=0x85fce0) at opncls.c:789
#9  0x0000000000403508 in display_file (filename=0x7fffffffe580
"./objdump_TC_SEL_BYTE_RANDOM_1/id_000000_cmpid_025424_belong_045814",
    target=<optimized out>, last_file=<optimized out>) at ./objdump.c:5003
#10 main (argc=<optimized out>, argv=<optimized out>) at ./objdump.c:5349

Thank you,
Ahcheong Lee

-- 
You are receiving this mail because:
You are on the CC list for the bug.