bug-binutils
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Bug binutils/21610] New: SEGV on unknown address in bfd_getl16


From: aadamski at quarkslab dot com
Subject: [Bug binutils/21610] New: SEGV on unknown address in bfd_getl16
Date: Sun, 18 Jun 2017 10:10:34 +0000

https://sourceware.org/bugzilla/show_bug.cgi?id=21610

            Bug ID: 21610
           Summary: SEGV on unknown address in bfd_getl16
           Product: binutils
           Version: 2.29 (HEAD)
            Status: UNCONFIRMED
          Severity: critical
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: aadamski at quarkslab dot com
  Target Milestone: ---

Hello there,

I have been fuzzing objdump with American Fuzzy Lop + ASAN/UBSAN.

Please find attached the minimized file causing the issue ("Input") and the
ASAN report log ("Output"). Below is the reduced stacktrace with links to the
corresponding source lines on a GitHub mirror.

The configuration settings used were `--enable-targets=all --disable-shared`.
The compilation flags used were `-g -O2 -fno-omit-frame-pointer
-fsanitize=address -fno-sanitize-recover=all`. The command used was `objdump
-afpxDSsgetTrR <file>`.

Let me know if there is any additional information I can provide.

--

Input: 87b8c6bea5472c3e39858260e44d1a69.61d98fe75a0ab6e99d39aab1638f2d3d.min
Output: 87b8c6bea5472c3e39858260e44d1a69.61d98fe75a0ab6e99d39aab1638f2d3d.txt

Error in "bfd_getl16": SEGV on unknown address 0x60c000010249 (pc
0x0000009c41ec bp 0x7fffffffe0a0 sp 0x7fffffffe0a0 T0)
  in bfd_getl16 at bfd/libbfd.c:505
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/bfd/libbfd.c#L505)
  in _bfd_vms_slurp_egsd at bfd/vms-alpha.c:1140
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/bfd/vms-alpha.c#L1140)
  in _bfd_vms_slurp_object_records at bfd/vms-alpha.c:2431
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/bfd/vms-alpha.c#L2431)
  in alpha_vms_object_p at bfd/vms-alpha.c:2615
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/bfd/vms-alpha.c#L2615)
  in bfd_check_format_matches at bfd/format.c:311
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/bfd/format.c#L311)
  in display_object_bfd at binutils/objdump.c:3605
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/binutils/objdump.c#L3605)
  in display_any_bfd at binutils/objdump.c:3696
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/binutils/objdump.c#L3696)
  in display_file at binutils/objdump.c:3717
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/binutils/objdump.c#L3717)
  in main at binutils/objdump.c:4019
    (see
https://github.com/bminor/binutils-gdb/blob/291e62953900e0f4998224127bc56239e421cda9/binutils/objdump.c#L4019)

-- 
You are receiving this mail because:
You are on the CC list for the bug.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]