[Bug binutils/18570] New: Crash in objdump (elf-attrs.c)

[paulwebsec at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=18570

            Bug ID: 18570
           Summary: Crash in objdump (elf-attrs.c)
           Product: binutils
           Version: 2.25
            Status: NEW
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: paulwebsec at gmail dot com
  Target Milestone: ---

Created attachment 8381
  --> https://sourceware.org/bugzilla/attachment.cgi?id=8381&action=edit
file to reproduce the segfault

Segfault produced by the command: `objdump -r <file>`

(gdb) r -r
"/home/user/binutils-gdb/afl_out_objdump/crashes/id:000007,sig:11,src:002710,op:flip1,pos:26769"
Starting program: /home/user/binutils-gdb/binutils/objdump -r
"/home/user/binutils-gdb/afl_out_objdump/crashes/id:000007,sig:11,src:002710,op:flip1,pos:26769"

Program received signal SIGSEGV, Segmentation fault.
0x00000000006eba4c in bfd_elf_add_obj_attr_int (address@hidden,
address@hidden, address@hidden, i=401923) at elf-attrs.c:300
300       attr->i = i;
(gdb) info registers
rax            0x1      1
rbx            0x0      0
rcx            0x62203  401923
rdx            0xf696b440       4137071680
rsi            0x1      1
rdi            0xc9b1c0 13218240
rbp            0xffffffff6a34ff10       0xffffffff6a34ff10
rsp            0x7fffffffe100   0x7fffffffe100
r8             0xc9f201 13234689
r9             0xfffffffff696b440       -157895616
r10            0x9      9
r11            0x3      3
r12            0x1      1
r13            0xc9b1c0 13218240
r14            0x62203  401923
r15            0xc9f29c 13234844
rip            0x6eba4c 0x6eba4c <bfd_elf_add_obj_attr_int+396>
eflags         0x10213  [ CF AF IF RF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0
(gdb) bt
#0  0x00000000006eba4c in bfd_elf_add_obj_attr_int (address@hidden,
address@hidden, address@hidden, i=401923) at elf-attrs.c:300
#1  0x00000000006ee1c7 in _bfd_elf_parse_attributes (address@hidden,
address@hidden) at elf-attrs.c:539
#2  0x00000000006335d5 in bfd_section_from_shdr (address@hidden,
address@hidden) at elf.c:2119
#3  0x000000000061b4d0 in bfd_elf64_object_p (abfd=0xc9b1c0) at elfcode.h:800
#4  0x00000000005af7c0 in bfd_check_format_matches (address@hidden,
address@hidden, address@hidden) at
format.c:305
#5  0x000000000041fdb0 in display_object_bfd (abfd=0xc9b1c0) at
./objdump.c:3407
#6  display_any_bfd (address@hidden, address@hidden) at
./objdump.c:3498
#7  0x000000000040d1f6 in display_file (target=0x0, 
    filename=0x7fffffffe861
"/home/user/binutils-gdb/afl_out_objdump/crashes/id:000007,sig:11,src:002710,op:flip1,pos:26769")
at ./objdump.c:3519
#8  display_file (target=<optimized out>, 
    filename=0x7fffffffe861
"/home/user/binutils-gdb/afl_out_objdump/crashes/id:000007,sig:11,src:002710,op:flip1,pos:26769")
at ./objdump.c:3525
#9  main (argc=3, argv=0x7fffffffe618) at ./objdump.c:3802
(gdb)

-- 
You are receiving this mail because:
You are on the CC list for the bug.