[Bug binutils/29233] New: Memory leak in copy_relocations_in_section

[patrick.jauernig at trust dot tu-darmstadt.de]

https://sourceware.org/bugzilla/show_bug.cgi?id=29233

            Bug ID: 29233
           Summary: Memory leak in copy_relocations_in_section
           Product: binutils
           Version: 2.39 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: patrick.jauernig at trust dot tu-darmstadt.de
  Target Milestone: ---

Created attachment 14137
  --> https://sourceware.org/bugzilla/attachment.cgi?id=14137&action=edit
Input leading to memory leak

There is a memory leak in copy_relocations_in_section in objcopy.c that we
found through fuzzing (confirmed with ASAN/LSAN).

relpp is allocated but never freed when relcount != 0, strip_symbols !=
STRIP_ALL, and relsize > 0. 

I appended the testcase as an attachment; we used the following command to
invoke objcopy:

./objcopy --dump-section .text=/dev/null objcopy_input /dev/null

-- 
You are receiving this mail because:
You are on the CC list for the bug.