https://sourceware.org/bugzilla/show_bug.cgi?id=25842
Bug ID: 25842
Summary: Null pointer dereference in nm-new
Product: binutils
Version: 2.35 (HEAD)
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: binutils
Assignee: unassigned at sourceware dot org
Reporter: nguyenmanhdung1710 at gmail dot com
Target Milestone: ---
Created attachment 12473
--> https://sourceware.org/bugzilla/attachment.cgi?id=12473&action=edit
PoC
Hi,
A null pointer dereference was discovered in nm-new (the latest commit 1619720)
in _bfd_elf_get_symbol_version_string(), that can cause a denial of service via
a crafted file.
To reproduce: nm-new -D PoC
ASAN says:
==23854==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc
0x7f2efc1af04e bp 0x7ffc621e9b10 sp 0x7ffc621e92a0 T0)
#0 0x7f2efc1af04d (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x4704d)
#1 0x49ed5c in _bfd_elf_get_symbol_version_string ../../bfd/elf.c:1914
#2 0x403afe in print_symname ../../binutils/nm.c:420
#3 0x408c37 in print_symbol_info_bsd ../../binutils/nm.c:1623
#4 0x406187 in print_symbol ../../binutils/nm.c:902
#5 0x407117 in print_symbols ../../binutils/nm.c:1102
#6 0x407a2d in display_rel_file ../../binutils/nm.c:1226
#7 0x4081c5 in display_file ../../binutils/nm.c:1393
#8 0x409c6a in main ../../binutils/nm.c:1874
#9 0x7f2efbbba82f in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
#10 0x402ce8 in _start
(/home/dungnguyen/PoCs/binutils_f717994/nm-new-1619720+0x402ce8)
Thanks,
Manh Dung
--
You are receiving this mail because:
You are on the CC list for the bug.
