[Bug binutils/26330] Malloc size error in objdump

[seviezhou at 163 dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26330

--- Comment #3 from zhouan <seviezhou at 163 dot com> ---
I found three malloc size error in objdump, here is the output of address
sanitizer:

malloc-size-error-bfd_get_full_section_contents-compress-275:

==57041==WARNING: AddressSanitizer failed to allocate 0x800000012528 bytes
==57041==AddressSanitizer's allocator is terminating the process instead of
returning 0
==57041==If you don't like this behavior set allocator_may_return_null=1
==57041==AddressSanitizer CHECK failed:
/build/llvm-toolchain-6.0-QjOn7h/llvm-toolchain-6.0-6.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
"((0)) != (0)" (0x0, 0x0)
    #0 0x4e3ee5 in __asan::AsanCheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4e3ee5)
    #1 0x501795 in __sanitizer::CheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x501795)
    #2 0x4ea2d6 in __sanitizer::ReportAllocatorCannotReturnNull()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea2d6)
    #3 0x4ea316 in __sanitizer::ReturnNullOrDieOnFailure::OnBadRequest()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea316)
    #4 0x425e96 in __asan::asan_malloc(unsigned long,
__sanitizer::BufferedStackTrace*)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x425e96)
    #5 0x4dad6b in __interceptor_malloc
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4dad6b)
    #6 0x6c305a in bfd_malloc /home/seviezhou/binutils-2.35/bfd/libbfd.c:275:9
    #7 0x6b2301 in bfd_get_full_section_contents
/home/seviezhou/binutils-2.35/bfd/compress.c:275:21
    #8 0x526865 in disassemble_section
/home/seviezhou/binutils-2.35/binutils/./objdump.c:3136:8
    #9 0x6d0ccc in bfd_map_over_sections
/home/seviezhou/binutils-2.35/bfd/section.c:1379:5
    #10 0x51c355 in disassemble_data
/home/seviezhou/binutils-2.35/binutils/./objdump.c:3524:3
    #11 0x51c355 in dump_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:4912
    #12 0x517e74 in display_object_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c
    #13 0x517e74 in display_any_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5064
    #14 0x517992 in display_file
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5085:3
    #15 0x51627f in main
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5433:6
    #16 0x7f4a42ecab96 in __libc_start_main
/build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
    #17 0x41aed9 in _start
(/home/seviezhou/binutils-2.35/binutils/objdump+0x41aed9)

//////////

malloc-size-error-dump_bfd-4889:

==3871==WARNING: AddressSanitizer failed to allocate 0x800000000150 bytes
==3871==AddressSanitizer's allocator is terminating the process instead of
returning 0
==3871==If you don't like this behavior set allocator_may_return_null=1
==3871==AddressSanitizer CHECK failed:
/build/llvm-toolchain-6.0-QjOn7h/llvm-toolchain-6.0-6.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
"((0)) != (0)" (0x0, 0x0)
    #0 0x4e3ee5 in __asan::AsanCheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4e3ee5)
    #1 0x501795 in __sanitizer::CheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x501795)
    #2 0x4ea2d6 in __sanitizer::ReportAllocatorCannotReturnNull()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea2d6)
    #3 0x4ea316 in __sanitizer::ReturnNullOrDieOnFailure::OnBadRequest()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea316)
    #4 0x425e96 in __asan::asan_malloc(unsigned long,
__sanitizer::BufferedStackTrace*)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x425e96)
    #5 0x4dad6b in __interceptor_malloc
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4dad6b)
    #6 0x6c305a in bfd_malloc /home/seviezhou/binutils-2.35/bfd/libbfd.c:275:9
    #7 0x6f7614 in elf_x86_64_get_synthetic_symtab
/home/seviezhou/binutils-2.35/bfd/elf64-x86-64.c:4813:35
    #8 0x51a2ff in dump_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:4889:20
    #9 0x517e74 in display_object_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c
    #10 0x517e74 in display_any_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5064
    #11 0x517992 in display_file
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5085:3
    #12 0x51627f in main
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5433:6
    #13 0x7fe7c1b02b96 in __libc_start_main
/build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
    #14 0x41aed9 in _start
(/home/seviezhou/binutils-2.35/binutils/objdump+0x41aed9)


///////////

malloc-size-error-slurp_dynamic_symtab-objump-790:

==21328==WARNING: AddressSanitizer failed to allocate 0x2aaaaaaaab68 bytes
==21328==AddressSanitizer's allocator is terminating the process instead of
returning 0
==21328==If you don't like this behavior set allocator_may_return_null=1
==21328==AddressSanitizer CHECK failed:
/build/llvm-toolchain-6.0-QjOn7h/llvm-toolchain-6.0-6.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
"((0)) != (0)" (0x0, 0x0)
    #0 0x4e3ee5 in __asan::AsanCheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4e3ee5)
    #1 0x501795 in __sanitizer::CheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x501795)
    #2 0x4ea2d6 in __sanitizer::ReportAllocatorCannotReturnNull()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea2d6)
    #3 0x4ea316 in __sanitizer::ReturnNullOrDieOnFailure::OnBadRequest()
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4ea316)
    #4 0x425e96 in __asan::asan_malloc(unsigned long,
__sanitizer::BufferedStackTrace*)
(/home/seviezhou/binutils-2.35/binutils/objdump+0x425e96)
    #5 0x4dad6b in __interceptor_malloc
(/home/seviezhou/binutils-2.35/binutils/objdump+0x4dad6b)
    #6 0xa3f3a6 in xmalloc
/home/seviezhou/binutils-2.35/libiberty/./xmalloc.c:147:12
    #7 0x51a074 in slurp_dynamic_symtab
/home/seviezhou/binutils-2.35/binutils/./objdump.c:790:23
    #8 0x51a074 in dump_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:4885
    #9 0x517e74 in display_object_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c
    #10 0x517e74 in display_any_bfd
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5064
    #11 0x517992 in display_file
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5085:3
    #12 0x51627f in main
/home/seviezhou/binutils-2.35/binutils/./objdump.c:5433:6
    #13 0x7f086769db96 in __libc_start_main
/build/glibc-OTsEL5/glibc-2.27/csu/../csu/libc-start.c:310
    #14 0x41aed9 in _start
(/home/seviezhou/binutils-2.35/binutils/objdump+0x41aed9)

-- 
You are receiving this mail because:
You are on the CC list for the bug.