[Bug tools/25082] New: Multiple crashes in eu-unstrip

["leftcopy.chx at gmail dot com" <sourceware-bugzilla at sourceware dot org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=25082

            Bug ID: 25082
           Summary: Multiple crashes in eu-unstrip
           Product: elfutils
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: tools
          Assignee: unassigned at sourceware dot org
          Reporter: leftcopy.chx at gmail dot com
                CC: elfutils-devel at sourceware dot org
  Target Milestone: ---

Created attachment 12033
  --> https://sourceware.org/bugzilla/attachment.cgi?id=12033&action=edit
pocs and error messages

When executing `./eu-unstrip $FILE ./stripped -o /dev/null`, there might be
some crashes if elfutils is built with ASAN. e.g., invalid read at
unstrip.c:1661, unstrip.c:1663, unstrip.c:444 and unstrip.c:774.

The relevant files are attached.

ASAN:DEADLYSIGNAL
=================================================================
==19829==ERROR: AddressSanitizer: SEGV on unknown address 0x1000802274a1 (pc
0x5555555673e7 bp 0x7fffffffbd10 sp 0x7fffffffa4e0 T0)
==19829==The signal is caused by a READ memory access.
    #0 0x5555555673e6 in copy_elided_sections
/home/hongxu/FOT/Targets/elfutils/eu-asan/src/unstrip.c:1661
    #1 0x55555556bea1 in handle_file
/home/hongxu/FOT/Targets/elfutils/eu-asan/src/unstrip.c:2162
    #2 0x55555556c760 in handle_explicit_files
/home/hongxu/FOT/Targets/elfutils/eu-asan/src/unstrip.c:2227
    #3 0x55555556f1f6 in main
/home/hongxu/FOT/Targets/elfutils/eu-asan/src/unstrip.c:2562
    #4 0x7ffff6596b96 in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
    #5 0x555555559a89 in _start
(/home/hongxu/FOT/Targets/elfutils/eu-asan/install/bin/eu-unstrip+0x5a89)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV
/home/hongxu/FOT/Targets/elfutils/eu-asan/src/unstrip.c:1661 in
copy_elided_sections
==19829==ABORTING

-- 
You are receiving this mail because:
You are on the CC list for the bug.