https://sourceware.org/bugzilla/show_bug.cgi?id=29495
Bug ID: 29495 Summary: Bug report Product: binutils Version: 2.40 (HEAD) Status: UNCONFIRMED Severity: normal Priority: P2 Component: binutils Assignee: unassigned at sourceware dot org Reporter: sophrosx at gmail dot com Target Milestone: --- Created attachment 14282 --> https://sourceware.org/bugzilla/attachment.cgi?id=14282&action=edit testcases for strip-new Hello, I detected some new memory leak and dead loop problems through fuzz testing, which I think may be a vulnerability. The configuration of binutils is: $ ./configure --disable-shared && make -j and compiled with gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0 I use the program strip-new in "~/binutils-gdb/binutils/strip-new" in master branch[https://github.com/bminor/binutils-gdb/tree/master] with parameter "-o tmp ./testcase", and after waiting 20 minutes, the program neither giving any outputs nor terminating. What is more, the program strip-new occupied all the memory. The testcase that trigger such results are in the attachment. If there is anything I am unclear about or need to discuss further, please feel free to contact me~ Looking forward to your reply! Thanks & Best Regards -- You are receiving this mail because: You are on the CC list for the bug.