https://sourceware.org/bugzilla/show_bug.cgi?id=25838
Bug ID: 25838
Summary: eu-readelf crashes due to a general protection fault
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: general
Assignee: unassigned at sourceware dot org
Reporter: nguyenmanhdung1710 at gmail dot com
CC: elfutils-devel at sourceware dot org
Target Milestone: ---
Created attachment 12470
--> https://sourceware.org/bugzilla/attachment.cgi?id=12470&action=edit
PoC
Hi,
A general protection fault was discovered in the latest commit 1a9fe4b of
elfutils 0.179, as demonstrated by eu-readelf, that can cause a denial of
service via a crafted file.
To reproduce: eu-readelf -a PoC
Valgrind says:
==3222== Process terminating with default action of signal 11 (SIGSEGV)
==3222== General Protection Fault
==3222== at 0x4124AB: handle_gnu_hash (readelf.c:3430)
==3222== by 0x4124AB: handle_hash (readelf.c:3501)
==3222== by 0x45EA8B: process_elf_file (readelf.c:1012)
==3222== by 0x465129: process_dwflmod (readelf.c:790)
==3222== by 0x4FCC888: dwfl_getmodules (dwfl_getmodules.c:86)
==3222== by 0x4094D5: process_file (readelf.c:898)
==3222== by 0x404D1E: main (readelf.c:372)
Thanks,
Manh Dung
--
You are receiving this mail because:
You are on the CC list for the bug.
