https://sourceware.org/bugzilla/show_bug.cgi?id=21578
Bug ID: 21578
Summary: global-buffer-overflow in sh_elf_set_mach_from_flags
Product: binutils
Version: 2.29 (HEAD)
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: binutils
Assignee: unassigned at sourceware dot org
Reporter: aadamski at quarkslab dot com
Target Milestone: ---
Hello there,
I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer.
Please find attached the minimized file causing the issue ("Input") and the
ASAN report log ("Output"). Below is the reduced stacktrace with links to the
corresponding source lines on a GitHub mirror.
The command I used was `objdump -D <file>`.
Let me know if there is any additional information I can provide.
--
Input: c24647613dbe4980271152483669f8a8.7ee780ea2ec4990cf7a4d67b77bb9114.min
Output: c24647613dbe4980271152483669f8a8.7ee780ea2ec4990cf7a4d67b77bb9114.txt
Error in "sh_elf_set_mach_from_flags": global-buffer-overflow
in sh_elf_set_mach_from_flags at bfd/elf32-sh.c:6350
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/elf32-sh.c#L6350)
in sh_elf_object_p at bfd/elf32-sh.c:6514
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/elf32-sh.c#L6514)
in bfd_elf32_object_p at bfd/elfcode.h:817
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/elfcode.h#L817)
in bfd_check_format_matches at bfd/format.c:311
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/format.c#L311)
in display_object_bfd at binutils/objdump.c:3602
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3602)
in display_any_bfd at binutils/objdump.c:3693
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3693)
in display_file at binutils/objdump.c:3714
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3714)
in main at binutils/objdump.c:4016
(see
https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L4016)
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils
