https://sourceware.org/bugzilla/show_bug.cgi?id=31921
Bug ID: 31921
Summary: [ARM][2.36] Linker produces bad executable
Product: binutils
Version: 2.36
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: ld
Assignee: unassigned at sourceware dot org
Reporter: christoph.franck at arcor dot de
Target Milestone: ---
Created attachment 15591
--> https://sourceware.org/bugzilla/attachment.cgi?id=15591&action=edit
Code that reproduces the issue
ld appears to produce a bad executable when the section .arm.exidx had
different LMA and VMA.
The attached file contains two linker control files,
STM32H563AIIXQ_FLASH2RAM_GOOD.ld and STM32H563AIIXQ_FLASH2RAM_BAD.ld. The
difference between the two files is that in _GOOD, .arm.exidx is in an output
section with identical LMA and VMA (>FLASH) while in _BAD, .arm.exidx is in an
output section with different LMA and VMA (>RAM AT> FLASH).
Building with the two linker control file yields /debug/linker_bug_GOOD.elf and
linker_bug_BAD.elf respectively.
In linker_bug_GOOD.elf, the _init and _fini functions are functional as
expected:
arm-none-eabi-objdump Linker_Bug_GOOD.elf -D --start-address=0x249C
--stop-address=0x24b4
Linker_Bug_GOOD.elf: file format elf32-littlearm
Disassembly of section .data:
249c <_init>:
249c: b5f8push{r3, r4, r5, r6, r7, lr}
249e: bf00nop
24a0: bcf8pop {r3, r4, r5, r6, r7}
24a2: bc08pop {r3}
24a4: 469emov lr, r3
24a6: 4770bx lr
24a8 <_fini>:
24a8: b5f8push{r3, r4, r5, r6, r7, lr}
24aa: bf00nop
24ac: bcf8pop {r3, r4, r5, r6, r7}
24ae: bc08pop {r3}
24b0: 469emov lr, r3
24b2: 4770bx lr
In linker_bug_BAD.elf, _init appears to be incomplete and program execution
falls through into _fini. The stack is left in an inconsistent state when the
code execution "returns" from a call to _init. The CPU produces a hard fault
shortly after the return.
arm-none-eabi-objdump Linker_Bug_BAD.elf -D --start-address=0x24A4
--stop-address=0x24b4
Linker_Bug_BAD.elf: file format elf32-littlearm
Disassembly of section .data:
24a4 <_init>:
24a4: b5f8push{r3, r4, r5, r6, r7, lr}
24a6: bf00nop
24a8 <_fini>:
24a8: b5f8push{r3, r4, r5, r6, r7, lr}
24aa: bf00nop
24ac: bcf8pop {r3, r4, r5, r6, r7}
24ae: bc08pop {r3}
24b0: 469emov lr, r3
24b2: 4770bx lr
Depending on the rest of the code, it looks like the issue can also affect
other functions than _init/_fini.
ld version:
arm-none-eabi-ld --version
GNU ld (GNU Tools for STM32 10.3-2021.10.20230912-2000) 2.36.1.20210621
This issue does not occur with more recent versions of binutils, but I did not
find a corresponding bug report for ld version 2.36.
--
You are receiving this mail because:
You are on the CC list for the bug.
