[Bug binutils/28247] New: Reachable abort in OP_E_memory, i386-dis.c:11915

[featherrain26 at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=28247

            Bug ID: 28247
           Summary: Reachable abort in OP_E_memory, i386-dis.c:11915
           Product: binutils
           Version: 2.37
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: featherrain26 at gmail dot com
  Target Milestone: ---

Created attachment 13621
  --> https://sourceware.org/bugzilla/attachment.cgi?id=13621&action=edit
POC

Hi, there.

There is a reachable abort in Objdump, OP_E_memory, i386-dis.c:11915 in commit
0d81afa (2.37.50.20210811).

The environment and flag are:
Distributor ID: Ubuntu
Description:    Ubuntu 16.04.6 LTS
Release:        16.04
Codename:       xenial
gcc: 5.4.0

CFLAG="-g -O0  -fsanitize=address" 

The reproduce command is:
objdump -SDW poc

Here is the trace reported by ASAN:
==120469==ERROR: AddressSanitizer: ABRT on unknown address 0x03fb0001d695 (pc
0x7fdea962e438 bp 0xfffffffffffffffc sp 0x7ffc6f43b998 T0)
     #0 0x7fdea962e438 in raise
/build/glibc-S7Ft5T/glibc-2.23/signal/../sysdeps/unix/sysv/linux/raise.c:54
     #1 0x7fdea9630039 in abort
/build/glibc-S7Ft5T/glibc-2.23/stdlib/abort.c:89
     #2 0x618386 in OP_E_memory
/mnt/data/playground/binutils-gdb/build/opcodes/../../opcodes/i386-dis.c:11915:15
     #3 0x610f8b in OP_EX
/mnt/data/playground/binutils-gdb/build/opcodes/../../opcodes/i386-dis.c:12777:7
     #4 0x603f68 in print_insn
/mnt/data/playground/binutils-gdb/build/opcodes/../../opcodes/i386-dis.c:9730:3
     #5 0x513ca0 in disassemble_bytes
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:2873:20
     #6 0x50b21c in disassemble_section
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:3455:4
     #7 0x6ee0dc in bfd_map_over_sections
/mnt/data/playground/binutils-gdb/build/bfd/../../bfd/section.c:1383:5
     #8 0x4fc459 in disassemble_data
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:3599:3
     #9 0x4fc459 in dump_bfd
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:5006:5
     #10 0x4f7d85 in display_object_bfd
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c
     #11 0x4f7d85 in display_any_bfd
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:5158:5
     #12 0x4f7915 in display_file
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:5179:3
     #13 0x4f5c9f in main
/mnt/data/playground/binutils-gdb/build/binutils/../../binutils/objdump.c:5529:6
     #14 0x7fdea961983f in __libc_start_main
/build/glibc-S7Ft5T/glibc-2.23/csu/../csu/libc-start.c:291
     #15 0x41c248 in _start
(/mnt/data/playground/binutils-gdb/build/binutils/objdump+0x41c248)

 AddressSanitizer can not provide additional info.
 SUMMARY: AddressSanitizer: ABRT
/build/glibc-S7Ft5T/glibc-2.23/signal/../sysdeps/unix/sysv/linux/raise.c:54 in
raise
 ==120469==ABORTING

-- 
You are receiving this mail because:
You are on the CC list for the bug.