[Bug binutils/17510] strings: crash when given a truncated ELF

[lcamtuf at coredump dot cx]

https://sourceware.org/bugzilla/show_bug.cgi?id=17510

--- Comment #2 from Michal Zalewski <lcamtuf at coredump dot cx> ---
Created attachment 7848
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7848&action=edit
Test case #2

Note that range checking problems are somewhat endemic across the function;
here's a test case that crashes in a different location but due to the same
--n_elt / ++idx pattern. This one looks like it leads to writes to arbitrary
pointers.

-- 
You are receiving this mail because:
You are on the CC list for the bug.