[Bug binutils/17531] readelf -a crashes on fuzzed samples

2014-11-22 Thread espen at grindhaug dot org
https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #39 from Espen Grindhaug  ---
Created attachment 7963
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7963&action=edit
3 more problematic programs

Attached is three more problematic programs. One more infinite loop, one heap
buffer overflow and one use after free. The ASAN output is also included.

Found using AFL.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/17531] readelf -a crashes on fuzzed samples

2014-11-22 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17531

--- Comment #40 from Alexander Cherepanov  ---
Created attachment 7964
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7964&action=edit
Sample with fishy malloc

This one doesn't crash `readelf -agteAruhlsSdIncwVW --dyn-syms -D` but gives an
error under valgrind.

Files: 1
Errors:
  1 Argument 'size' of function malloc has a fishy (possibly negative)
value: ...

-- 
You are receiving this mail because:
You are on the CC list for the bug.

___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/17512] segfault in PE parser / _bfd_pei_swap_aouthdr_in

2014-11-22 Thread cherepan at mccme dot ru
https://sourceware.org/bugzilla/show_bug.cgi?id=17512

--- Comment #112 from Alexander Cherepanov  ---
Created attachment 7965
  --> https://sourceware.org/bugzilla/attachment.cgi?id=7965&action=edit
Next crashers for multiarch `objdump -afphxgGtTrRwW --special-syms`

Files: 37
Errors:
 12 Argument 'size' of function malloc has a fishy (possibly negative)
value: ...
 20 Conditional jump or move depends on uninitialised value(s)
 11 Invalid read of size ...
  4 Invalid write of size ...
 11 Process terminating with default action of signal 11 (SIGSEGV)
  2 Use of uninitialised value of size ...

-- 
You are receiving this mail because:
You are on the CC list for the bug.

___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils