[Bug binutils/17531] readelf -a crashes on fuzzed samples

[cherepan at mccme dot ru]

https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #12 from Alexander Cherepanov <cherepan at mccme dot ru> ---
Created attachment 7906
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7906&action=edit
More badness for `readelf -a`

Files: 16
Errors:
     13 Argument 'size' of function malloc has a fishy (possibly negative)
value: ...
      3 Conditional jump or move depends on uninitialised value(s)
      1 Invalid read of size ...
      1 Process terminating with default action of signal 11 (SIGSEGV)
      2 Use of uninitialised value of size ...

Not all samples crash with SIGSEGV, most have problems with memory allocation.
Anyway all their badness is described in list.txt inside the archive.

-- 
You are receiving this mail because:
You are on the CC list for the bug.