|
From: | aadamski at quarkslab dot com |
Subject: | [Bug binutils/21638] New: SEGV on unknown address in bfd_getl16 |
Date: | Tue, 20 Jun 2017 20:05:37 +0000 |
https://sourceware.org/bugzilla/show_bug.cgi?id=21638 Bug ID: 21638 Summary: SEGV on unknown address in bfd_getl16 Product: binutils Version: 2.29 (HEAD) Status: UNCONFIRMED Severity: critical Priority: P2 Component: binutils Assignee: unassigned at sourceware dot org Reporter: aadamski at quarkslab dot com Target Milestone: --- Hello there, I have been fuzzing objdump with American Fuzzy Lop + ASAN/UBSAN. Please find attached the minimized file causing the issue ("Input") and the ASAN report log ("Output"). Below is the reduced stacktrace with links to the corresponding source lines on a GitHub mirror. The configuration settings used were `--enable-targets=all --disable-shared`. The compilation flags used were `-g -O2 -fno-omit-frame-pointer -fsanitize=address -fno-sanitize-recover=all`. The command used was `objdump -afpxDSsgetTrR <file>`. Let me know if there is any additional information I can provide. -- Input: 2e91b2c82b5c858c0674035a69812f07.e5eb290fbf40c2792c1d052660e8898e.min Output: 2e91b2c82b5c858c0674035a69812f07.e5eb290fbf40c2792c1d052660e8898e.txt Error in "bfd_getl16": SEGV on unknown address 0x60c0000102c8 (pc 0x00000096d7a8 bp 0x7fffffffe090 sp 0x7fffffffe080 T0) in bfd_getl16 at bfd/libbfd.c:505 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/bfd/libbfd.c#L505) in _bfd_vms_slurp_egsd at bfd/vms-alpha.c:1156 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/bfd/vms-alpha.c#L1156) in _bfd_vms_slurp_object_records at bfd/vms-alpha.c:2456 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/bfd/vms-alpha.c#L2456) in alpha_vms_object_p at bfd/vms-alpha.c:2640 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/bfd/vms-alpha.c#L2640) in bfd_check_format_matches at bfd/format.c:311 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/bfd/format.c#L311) in display_object_bfd at binutils/objdump.c:3608 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/binutils/objdump.c#L3608) in display_any_bfd at binutils/objdump.c:3699 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/binutils/objdump.c#L3699) in display_file at binutils/objdump.c:3720 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/binutils/objdump.c#L3720) in main at binutils/objdump.c:4024 (see https://github.com/bminor/binutils-gdb/blob/a6cab9afd2c81465265c8d09569e3e6ef43d2954/binutils/objdump.c#L4024) -- You are receiving this mail because: You are on the CC list for the bug.
[Prev in Thread] | Current Thread | [Next in Thread] |