[Bug binutils/28346] New: Segfault attempting to disassemble raw binary

[luke_sourcewarebugs at dashjr dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=28346

            Bug ID: 28346
           Summary: Segfault attempting to disassemble raw binary
           Product: binutils
           Version: 2.37
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: luke_sourcewarebugs at dashjr dot org
  Target Milestone: ---
              Host: powerpc64le-unknown-linux-gnu
            Target: xtensa-esp32-elf
             Build: powerpc64le-unknown-linux-gnu

$ xtensa-esp32-elf-objdump -D -b binary -mxtensa
wifi_20191021014722_FW_7595_BPu_SU0_S411N_SC4002_6L5T.bin 

wifi_20191021014722_FW_7595_BPu_SU0_S411N_SC4002_6L5T.bin:     file format
binary


Disassembly of section .data:

00000000 <.data>:
Segmentation fault

(gdb) bt full
#0  0x00007ffff66edb14 in xtensa_property_section_name
(sec=sec@entry=0x1000b4ad8, base_name=base_name@entry=0x7ffff755de68
".xt.prop", separate_sections=1) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/bfd/elf32-xtensa.c:11160
        suffix = <optimized out>
        group_name = <optimized out>
        prop_sec_name = <optimized out>
        __PRETTY_FUNCTION__ = "xtensa_property_section_name"
#1  0x00007ffff66edfb4 in xtensa_get_separate_property_section
(sec=sec@entry=0x1000b4ad8, base_name=base_name@entry=0x7ffff755de68
".xt.prop", separate_section=separate_section@entry=1) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/bfd/elf32-xtensa.c:11210
        prop_sec_name = <optimized out>
        prop_sec = <optimized out>
#2  0x00007ffff66ee03c in xtensa_get_property_section
(sec=sec@entry=0x1000b4ad8, base_name=0x7ffff755de68 ".xt.prop") at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/bfd/elf32-xtensa.c:11225
        prop_sec = <optimized out>
#3  0x00007ffff66fcb10 in xtensa_read_table_entries (abfd=0x1000b1690,
section=0x1000b4ad8, table_p=0x7ffff7f73b18 <priv+680>, sec_name=<optimized
out>, output_addr=<optimized out>) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/bfd/elf32-xtensa.c:836
        table_section = <optimized out>
        table_size = 0
        table_data = <optimized out>
        blocks = <optimized out>
        blk = <optimized out>
        block_count = <optimized out>
        num_records = 4295693968
        internal_relocs = <optimized out>
        irel = <optimized out>
        rel_end = <optimized out>
        section_addr = <optimized out>
        off = <optimized out>
        predef_flags = <optimized out>
        table_entry_size = <optimized out>
        section_limit = <optimized out>
#4  0x00007ffff7363eb4 in print_insn_xtensa (memaddr=0, info=0x7fffffffdc40) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/opcodes/xtensa-dis.c:316
        abfd = 0x1000b1690
        section = 0x1000b4ad8
        operand_val = 0
        bytes_fetched = <optimized out>
        size = <optimized out>
        maxsize = <optimized out>
        i = <optimized out>
        n = <optimized out>
        noperands = <optimized out>
        nslots = <optimized out>
        isa = <optimized out>
        opc = <optimized out>
        fmt = <optimized out>
        priv = {byte_buf = 0x1000b36b0 "p\rH\366\377\177", bailout = {{__jmpbuf
= {0 <repeats 64 times>}, __mask_was_saved = 0, __saved_mask = {__val = {0
<repeats 16 times>}}}}, last_section = 0x1000b4ad8, insn_table_entries = 0x0,
insn_table_entry_count = 0, insn_table_cur_addr = 0, insn_table_cur_idx = 0}
        byte_buf = 0x1000b36b0 "p\rH\366\377\177"
        insn_buffer = 0x1000b3670
        slot_buffer = 0x1000b3690
        first = <optimized out>
        first_slot = <optimized out>
        valid_insn = <optimized out>
        insn_block = <optimized out>
#5  0x000000010001296c in disassemble_bytes (inf=inf@entry=0x7fffffffdc40,
disassemble_fn=0x7ffff7363d60 <print_insn_xtensa>, insns=insns@entry=1,
data=0x7ffff5870010 "Sign\253\035M\036", start_offset=<optimized out>,
start_offset@entry=0, stop_offset=<optimized out>, stop_offset@entry=1150976,
rel_offset=rel_offset@entry=0, relppp=relppp@entry=0x7fffffffd998,
relppend=relppend@entry=0x0) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:2740
        buf = "       0\000J\v\000\001\000\000\000\370\027H\366\377\177",
'\000' <repeats 19 times>, "\"\361p|\334\216\272\220", <incomplete sequence
\330>
        bpc = 0
        pb = 0
        z = <optimized out>
        need_nl = 0
        aux = 0x7fffffffdc08
        section = 0x1000b4ad8
        octets_per_line = 4
        skip_addr_chars = 0
        addr_offset = 0
        opb = 1
        skip_zeroes = 8
        skip_zeroes_at_end = 3
        octets = 0
        sfile = {buffer = 0x1000b3010 "P\022H\366\377\177", pos = 0, alloc =
120}
        color_buffer = <optimized out>
        line_buffer = <optimized out>
        max_level = <optimized out>
#6  0x0000000100013d40 in disassemble_section (abfd=0x1000b1690,
section=0x1000b4ad8, inf=0x7fffffffdc40) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:3307
        addr = <optimized out>
        nextsym = 0x0
        nextstop_offset = 1150976
        insns = 1
        bed = <optimized out>
        sign_adjust = 0
        pinfo = 0x7fffffffdc40
        paux = 0x7fffffffdc08
        opb = <optimized out>
        data = 0x7ffff5870010 "Sign\253\035M\036"
        datasize = <optimized out>
        rel_pp = 0x0
        rel_ppstart = 0x0
        rel_ppend = 0x0
        stop_offset = 1150976
        sym = 0x0
        place = 0
        rel_count = <optimized out>
        rel_offset = 0
        addr_offset = 0
        do_print = 1
        stop_offset_reached = stop_offset_reached
        function_sym = function_sym
        next_sym = next_sym
        loop_until = stop_offset_reached
#7  0x00007ffff66ccf44 in bfd_map_over_sections (abfd=0x1000b1690,
operation=0x100013228 <disassemble_section>, user_storage=0x7fffffffdc40) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/bfd/section.c:1362
        sect = 0x1000b4ad8
        i = 0
        __PRETTY_FUNCTION__ = "bfd_map_over_sections"
#8  0x000000010000ef84 in disassemble_data (abfd=abfd@entry=0x1000b1690) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:3448
        disasm_info = {fprintf_func = 0x10000f8f4 <objdump_sprintf>, stream =
0x7fffffffd828, application_data = 0x7fffffffdc08, flavour =
bfd_target_unknown_flavour, arch = bfd_arch_xtensa, mach = 1, endian =
BFD_ENDIAN_UNKNOWN, endian_code = BFD_ENDIAN_UNKNOWN, section = 0x1000b4ad8,
symbols = 0x0, num_symbols = 0, symtab = 0x1000b27c0, symtab_pos = -1,
symtab_size = 0, flags = 1610612736, private_data = 0x7ffff7f73870 <priv>,
read_memory_func = 0x7ffff71fbeac <buffer_read_memory>, memory_error_func =
0x7ffff71fbf7c <perror_memory>, print_address_func = 0x100012234
<objdump_print_address>, symbol_at_address_func = 0x100012018
<objdump_symbol_at_address>, symbol_is_valid = 0x7ffff71fc170
<generic_symbol_is_valid>, buffer = 0x7ffff5870010 "Sign\253\035M\036",
buffer_vma = 0, buffer_length = 1150976, bytes_per_line = 8, bytes_per_chunk =
0, display_endian = BFD_ENDIAN_UNKNOWN, octets_per_byte = 1, skip_zeroes = 8,
skip_zeroes_at_end = 3, disassembler_needs_relocs = 0, insn_info_valid = 0
'\000', branch_delay_insns = 0 '\000', data_size = 0 '\000', insn_type =
dis_noninsn, target = 0, target2 = 0, disassembler_options = 0x0, stop_vma = 0,
stop_offset = 1150976}
        aux = {abfd = 0x1000b1690, require_sec = 0, dynrelbuf = 0x0,
dynrelcount = 0, disassemble_fn = 0x7ffff7363d60 <print_insn_xtensa>, reloc =
0x0, symbol = 0x0}
        i = <optimized out>
#9  0x0000000100011178 in dump_bfd (abfd=abfd@entry=0x1000b1690,
is_mainfile=is_mainfile@entry=1) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:4830
        bed = <optimized out>
#10 0x0000000100011308 in display_object_bfd (abfd=abfd@entry=0x1000b1690) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:4892
        matching = 0x0
#11 0x0000000100011588 in display_any_bfd (file=file@entry=0x1000b1690,
level=level@entry=0) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:4982
No locals.
#12 0x0000000100011604 in display_file (filename=0x7fffffffe938
"wifi_20191021014722_FW_7595_BPu_SU0_S411N_SC4002_6L5T.bin",
target=target@entry=0x7fffffffe928 "binary", last_file=<optimized out>) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:5003
        file = 0x1000b1690
#13 0x00000001000158b8 in main (argc=<optimized out>, argv=<optimized out>) at
/var/tmp/portage/cross-xtensa-esp32-elf/binutils-2.34-r2/work/binutils-2.34/binutils/objdump.c:5349
        c = <optimized out>
        target = 0x7fffffffe928 "binary"
        seenflag = 1

-- 
You are receiving this mail because:
You are on the CC list for the bug.