[Bug binutils/29491] New: program strip-new bug report

[sophrosx at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29491

            Bug ID: 29491
           Summary: program strip-new bug report
           Product: binutils
           Version: 2.39
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: sophrosx at gmail dot com
  Target Milestone: ---

Created attachment 14276
  --> https://sourceware.org/bugzilla/attachment.cgi?id=14276&action=edit
the testcases triggered dead loop problem

Hello,

I detected the dead loop problem through fuzz testing, which I think be a
vulnerability.

The configuration of binutils is:

$  ./configure --disable-shared && make -j

and compiled with gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0

I use the program strip-new in ~/binutils-gdb-binutils-2_39/binutils/strip-new
with parameter "-o tmp ./dead_loop_input", and after waiting 6 hours, the
program neither giving any outputs nor terminating.

The testcase that trigger such results are in the attachment.

Thanks & Best Regards

-- 
You are receiving this mail because:
You are on the CC list for the bug.