https://sourceware.org/bugzilla/show_bug.cgi?id=29176
--- Comment #6 from Evgeny Vereshchagin ---
> Is the dbgsym package for the main (x86_64) libc6 package also installed?
As far as I can see libc6-dbg is installed there but even without it when code
is compiled without -m32 and aborts backtra
https://sourceware.org/bugzilla/show_bug.cgi?id=29176
Evgeny Vereshchagin changed:
What|Removed |Added
Status|UNCONFIRMED |RESOLVED
Resolution|---
https://sourceware.org/bugzilla/show_bug.cgi?id=29176
--- Comment #3 from Evgeny Vereshchagin ---
I added printf and here's what it printed on Ubuntu Jammy:
```
FRAMENO: '0', SYMNAME: '__kernel_vsyscall'
FRAMENO: '1', SYMNAME: ''
FRAMENO: '2', SYMNAME: 'raise'
FRAMENO: '3', SYMNAME: 'main'
FRAMEN
https://sourceware.org/bugzilla/show_bug.cgi?id=29176
--- Comment #2 from Evgeny Vereshchagin ---
> Do you have any more information on what changed between "Focal" and "Jammy",
> glibc upgrade? some system settings, gcc upgrade? That might explain what you
> are seeing?
I think everything was
https://sourceware.org/bugzilla/show_bug.cgi?id=29180
--- Comment #2 from Evgeny Vereshchagin ---
With that patch applied the test passed in
https://github.com/evverx/elfutils/pull/86 and according to
https://coveralls.io/builds/49520251 the coverage of debuginfod.cxx went up a
little.
`git am`
https://sourceware.org/bugzilla/show_bug.cgi?id=29180
Bug ID: 29180
Summary: run-debuginfod-fd-prefetch-caches.sh seems to fail on
Ubuntu Focal when elfutils is built with --enable-gcov
Product: elfutils
Version: unspecified
https://sourceware.org/bugzilla/show_bug.cgi?id=29176
Bug ID: 29176
Summary: run-backtrace-native-biarch.sh seems to fail on Ubuntu
Jammy
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: norm
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
--- Comment #12 from Evgeny Vereshchagin ---
FWIW with
https://sourceware.org/git/?p=elfutils.git;a=commit;h=e646e363e72e06e0ed5574c929236d815ddcbbaf
applied the test appears to be flaky on Packit on s390x:
https://copr-be.cloud.fedoraproject.
https://sourceware.org/bugzilla/show_bug.cgi?id=29000
--- Comment #4 from Evgeny Vereshchagin ---
I rebased the "fuzz" branch on top of my fork and ran all the tests in
https://github.com/evverx/elfutils/pull/73. MSan no longer complains. Thanks!
--
You are receiving this mail because:
You are
https://sourceware.org/bugzilla/show_bug.cgi?id=29000
--- Comment #1 from Evgeny Vereshchagin ---
Created attachment 14036
--> https://sourceware.org/bugzilla/attachment.cgi?id=14036&action=edit
file triggering issue in fuzz-libdwfl
The same issue was found by fuzz-libdwfl.
```
make -C tests f
https://sourceware.org/bugzilla/show_bug.cgi?id=29000
Bug ID: 29000
Summary: Conditional jump or move depends on uninitialised
value in elf_compress_gnu
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #17 from Evgeny Vereshchagin ---
FWIW I tested
https://sourceware.org/pipermail/elfutils-devel/2022q1/004637.html as well with
gcc (since it isn't reproducible with clang), honggfuzz and the latest OSS-Fuzz
corpus. That issue is go
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #16 from Evgeny Vereshchagin ---
I tested both patches with CFLite, AFL++ and hongfuzz for about ten minutes
under ASan/UBSan with the reproducer testcases included in the "seed" corpus. I
also unleashed the latest corpus provided
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
Evgeny Vereshchagin changed:
What|Removed |Added
Resolution|--- |FIXED
Status|ASSIGN
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #11 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #10)
> That is a different issue than the one reported in comment #5.
> This bug might be split up for the different issues found.
Sorry. I seem to have over
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #9 from Evgeny Vereshchagin ---
According to OSS-Fuzz looks like that commit triggered
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43307 (which was also
reported in
https://sourceware.org/pipermail/elfutils-devel/2022q1/0
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #8 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #7)
> commit 9f70a762ab88ceebb8a48a7c9c3ce39ff7f205af
> Author: Mark Wielaard
> Date: Fri Dec 24 02:01:32 2021 +0100
>
> libdwfl: Calculate addr to rea
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #6 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #2)
> Interesting. I did run afl for some time (more than a day) and it found some
> more issues, but none of these (yet?). I'll try honggfuzz in the future to
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #5 from Evgeny Vereshchagin ---
Created attachment 13875
--> https://sourceware.org/bugzilla/attachment.cgi?id=13875&action=edit
File triggering "member access within misaligned address"
--
You are receiving this mail because:
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #4 from Evgeny Vereshchagin ---
Created attachment 13874
--> https://sourceware.org/bugzilla/attachment.cgi?id=13874&action=edit
File triggering "variable length array bound evaluates to non-positive value 0"
--
You are receivi
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #3 from Evgeny Vereshchagin ---
As far as I can see with the fuzz branch rebased on top on my fuzzing branch
almost all the issues including
https://sourceware.org/pipermail/elfutils-devel/2021q4/004596.html are gone.
Thanks! I'll
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
--- Comment #1 from Evgeny Vereshchagin ---
FWIW There are at least 4 uniq crashes honggfuzz has found related to either
"member access within misaligned address" or "load of misaligned address":
gelf_xlate.h:42:1: runtime error: member acces
https://sourceware.org/bugzilla/show_bug.cgi?id=28720
Bug ID: 28720
Summary: UBSan: member access within misaligned address
0x7f6e8d80f142 for type 'struct Elf32_Phdr', which
requires 4 byte alignment
Product: elfutils
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #10 from Evgeny Vereshchagin ---
Looks like the memory leak is gone. Thanks!
--
You are receiving this mail because:
You are on the CC list for the bug.
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
--- Comment #10 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #9)
> (In reply to Evgeny Vereshchagin from comment #7)
> > > Note that packit doesn't use real hardware for various architectures but
> > > "container emulat
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #8 from Evgeny Vereshchagin ---
I can't reproduce that "unknown-crash on address 0x7f54aacd7000" anymore.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #8 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #7)
> (In reply to Evgeny Vereshchagin from comment #2)
> > There seem to be quite a few new patches on the mailing list. I wonder if
> > it's possible to some
https://sourceware.org/bugzilla/show_bug.cgi?id=28710
--- Comment #2 from Evgeny Vereshchagin ---
With https://code.wildebeest.org/git/user/mjw/elfutils/log/?h=fuzz rebased on
top of my "fuzzing" branch I can no longer reproduce this issue. Thanks!
--
You are receiving this mail because:
You ar
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #7 from Evgeny Vereshchagin ---
Created attachment 13869
--> https://sourceware.org/bugzilla/attachment.cgi?id=13869&action=edit
archive with a report and a file triggering a memory leak
Thanks! That branch helped me a lot. I re
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #5 from Evgeny Vereshchagin ---
I can't seem to apply that patch:
```
$ git am --exclude=libdwfl/ChangeLog p4.patch
Applying: libdwfl: Rewrite GElf_Nhdr reading in dwfl_segment_report_module
error: patch failed: libdwfl/dwfl_segmen
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #4 from Evgeny Vereshchagin ---
(In reply to Evgeny Vereshchagin from comment #3)
> (In reply to Mark Wielaard from comment #1)
> > I couldn't replicate the infinite loop, which I assume has been fixed by:
> > https://sourceware.or
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #5 from Evgeny Vereshchagin ---
Created attachment 13867
--> https://sourceware.org/bugzilla/attachment.cgi?id=13867&action=edit
regression
I ran the fuzzer a bit longer and it seems
https://sourceware.org/pipermail/elfutils-dev
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #3 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #1)
> I couldn't replicate the infinite loop, which I assume has been fixed by:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
I haven't
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #4 from Evgeny Vereshchagin ---
I can confirm that with those three patches applied I can no longer reproduce
the issue. I tested it with both `--enable-honggfuzz` from
https://sourceware.org/pipermail/elfutils-devel/2021q4/004554.
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #2 from Evgeny Vereshchagin ---
(In reply to Mark Wielaard from comment #1)
> I couldn't replicate the infinite loop, which I assume has been fixed by:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
>
> But I
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
--- Comment #7 from Evgeny Vereshchagin ---
> Note that packit doesn't use real hardware for various architectures but
> "container emulation" which causes various testcases to fail.
>
I think I ran into issues like that in
https://github.co
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
Bug ID: 28715
Summary: There seems to be an infinite loop in
dwfl_segment_report_module
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity:
https://sourceware.org/bugzilla/show_bug.cgi?id=28710
Bug ID: 28710
Summary: ERROR: AddressSanitizer: SEGV on unknown address (on
i386)
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
--- Comment #2 from Evgeny Vereshchagin ---
> Should we try to handle unaligned access in the xlateto functions?
> Those functions make use of a lot of tricky macros, which depend on the
> types passed in.
>
> Or should we fix the called (dwf
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
--- Comment #3 from Evgeny Vereshchagin ---
I think they are constrained in the sense that those machines are much slower
than usual. On top of that the packages are built in a sandbox environment and
that makes them even slower.
--
You are
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
--- Comment #1 from Evgeny Vereshchagin ---
Created attachment 13859
--> https://sourceware.org/bugzilla/attachment.cgi?id=13859&action=edit
full log
Just in case, I've just attached the full log.
--
You are receiving this mail because:
Y
https://sourceware.org/bugzilla/show_bug.cgi?id=28708
Bug ID: 28708
Summary: run-debuginfod-webapi-concurrency.sh seems to be flaky
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
--- Comment #7 from Evgeny Vereshchagin ---
> Interestingly, something started to trigger unreproducible MSan crashes but
> I'm inclined to say it was probably a fluke.
It wasn't a glitch. The file I added to the test suite was also automatic
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
--- Comment #6 from Evgeny Vereshchagin ---
Thanks! I can confirm that the issue is gone.
I tested it in https://github.com/evverx/elfutils/pull/53 by adding that file
to the testsuite in
https://github.com/evverx/elfutils/pull/53/commits/38c
https://sourceware.org/bugzilla/show_bug.cgi?id=28685
Bug ID: 28685
Summary: UBSan: member access within misaligned address
0x7ff316818032 for type 'struct Elf32_Phdr'
Product: elfutils
Version: unspecified
Status: UNCONF
https://sourceware.org/bugzilla/show_bug.cgi?id=28677
Evgeny Vereshchagin changed:
What|Removed |Added
CC||evvers at ya dot ru
--- Comment
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
--- Comment #4 from Evgeny Vereshchagin ---
Created attachment 13842
--> https://sourceware.org/bugzilla/attachment.cgi?id=13842&action=edit
File triggering an "invalid read"
I've just attached a file triggering the issue:
```
autoreconf -
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
--- Comment #3 from Evgeny Vereshchagin ---
Looks like it keeps popping up with all the patches applied
```
0a2c8345 libdwfl: Don't try to convert too many dyns in dwfl_link_map_report
ea8ce550 libdwfl: Don't install an Elf handle in a Dwfl_Mo
https://sourceware.org/bugzilla/show_bug.cgi?id=28659
--- Comment #4 from Evgeny Vereshchagin ---
> But it comes with a horribly proprietary license
Unfortunately LGTM (like many other CI services) is tightly coupled with GitHub
(where it can be used for automated analysis of open source project
https://sourceware.org/bugzilla/show_bug.cgi?id=28666
--- Comment #8 from Evgeny Vereshchagin ---
Created attachment 13840
--> https://sourceware.org/bugzilla/attachment.cgi?id=13840&action=edit
File triggering an "invalid read"
I've just added a file triggering that issue.
```
$ git describe
https://sourceware.org/bugzilla/show_bug.cgi?id=28655
--- Comment #2 from Evgeny Vereshchagin ---
I can't seem to reproduce that memory leak anymore. Thanks!
--
You are receiving this mail because:
You are on the CC list for the bug.
https://sourceware.org/bugzilla/show_bug.cgi?id=28659
--- Comment #2 from Evgeny Vereshchagin ---
> Note that the overflow is actually harmless
It is but since the fuzz target ran into it almost as soon as it started it
prevented the fuzz target from discovering new issues that can be less harml
https://sourceware.org/bugzilla/show_bug.cgi?id=28666
--- Comment #6 from Evgeny Vereshchagin ---
My bad. The backtrace is different there:
```
2021-12-08T20:14:08.7167911Z ==21==ERROR: AddressSanitizer:
heap-buffer-overflow on address 0x7f4f1d328000 at pc 0x00524c9f bp
0x7fff9271bc40 sp 0x7f
https://sourceware.org/bugzilla/show_bug.cgi?id=28666
--- Comment #5 from Evgeny Vereshchagin ---
I was able to trigger the same issue with a different file by running the fuzz
target a bit longer. I'll double check and attach the file
--
You are receiving this mail because:
You are on the CC l
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
--- Comment #2 from Evgeny Vereshchagin ---
As far as I can see both issues are gone with that patch applied. Thanks!
--
You are receiving this mail because:
You are on the CC list for the bug.
https://sourceware.org/bugzilla/show_bug.cgi?id=28654
--- Comment #2 from Evgeny Vereshchagin ---
I applied the patch on top of the master branch with the other two patches
related to libwfl applied and ran `src/stack` under Valgrind. I also ran the
unit tests on four different architectures just
https://sourceware.org/bugzilla/show_bug.cgi?id=28666
--- Comment #4 from Evgeny Vereshchagin ---
With that patch applied I can confirm that the issue is gone.Just to make sure
also run the unit tests on aarch64, i386, ppc64le and x86_64 and they all
passed there. Thanks!
--
You are receiving t
https://sourceware.org/bugzilla/show_bug.cgi?id=28666
Evgeny Vereshchagin changed:
What|Removed |Added
CC||evvers at ya dot ru
--- Comment
https://sourceware.org/bugzilla/show_bug.cgi?id=28660
Bug ID: 28660
Summary: ASan seems to complain about a "heap-buffer-overflow"
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
https://sourceware.org/bugzilla/show_bug.cgi?id=28659
Bug ID: 28659
Summary: UBSan seems to complain about an "integer overflow" in
dwfl_segment_report_module
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
https://sourceware.org/bugzilla/show_bug.cgi?id=28657
--- Comment #1 from Evgeny Vereshchagin ---
*** Bug 28658 has been marked as a duplicate of this bug. ***
--
You are receiving this mail because:
You are on the CC list for the bug.
https://sourceware.org/bugzilla/show_bug.cgi?id=28658
Evgeny Vereshchagin changed:
What|Removed |Added
Status|UNCONFIRMED |RESOLVED
Resolution|---
https://sourceware.org/bugzilla/show_bug.cgi?id=28658
Bug ID: 28658
Summary: UBSan seems to report a divison-by-zero in
dwfl_link_map_report
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: n
https://sourceware.org/bugzilla/show_bug.cgi?id=28657
Bug ID: 28657
Summary: UBSan seems to report a divison-by-zero in
dwfl_link_map_report
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: n
https://sourceware.org/bugzilla/show_bug.cgi?id=28655
Bug ID: 28655
Summary: There seems to be a memory leak in file_read_elf
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
Severity: normal
Priority: P2
https://sourceware.org/bugzilla/show_bug.cgi?id=28654
Bug ID: 28654
Summary: There seems to be an infinite loop somewhere in
dwfl_segment_report_module
Product: elfutils
Version: unspecified
Status: UNCONFIRMED
66 matches
Mail list logo
