[Bug binutils/17531] readelf -a crashes on fuzzed samples
https://sourceware.org/bugzilla/show_bug.cgi?id=17531 --- Comment #39 from Espen Grindhaug --- Created attachment 7963 --> https://sourceware.org/bugzilla/attachment.cgi?id=7963&action=edit 3 more problematic programs Attached is three more problematic programs. One more infinite loop, one heap buffer overflow and one use after free. The ASAN output is also included. Found using AFL. -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils
[Bug binutils/17531] readelf -a crashes on fuzzed samples
https://sourceware.org/bugzilla/show_bug.cgi?id=17531 --- Comment #40 from Alexander Cherepanov --- Created attachment 7964 --> https://sourceware.org/bugzilla/attachment.cgi?id=7964&action=edit Sample with fishy malloc This one doesn't crash `readelf -agteAruhlsSdIncwVW --dyn-syms -D` but gives an error under valgrind. Files: 1 Errors: 1 Argument 'size' of function malloc has a fishy (possibly negative) value: ... -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils
[Bug binutils/17512] segfault in PE parser / _bfd_pei_swap_aouthdr_in
https://sourceware.org/bugzilla/show_bug.cgi?id=17512 --- Comment #112 from Alexander Cherepanov --- Created attachment 7965 --> https://sourceware.org/bugzilla/attachment.cgi?id=7965&action=edit Next crashers for multiarch `objdump -afphxgGtTrRwW --special-syms` Files: 37 Errors: 12 Argument 'size' of function malloc has a fishy (possibly negative) value: ... 20 Conditional jump or move depends on uninitialised value(s) 11 Invalid read of size ... 4 Invalid write of size ... 11 Process terminating with default action of signal 11 (SIGSEGV) 2 Use of uninitialised value of size ... -- You are receiving this mail because: You are on the CC list for the bug. ___ bug-binutils mailing list bug-binutils@gnu.org https://lists.gnu.org/mailman/listinfo/bug-binutils