Issue 442161254: elfutils:fuzz-libdwfl: Crash in load_shdr_wrlock

[buganizer-system@google.com]

Replying to this email means your email address will be shared with the
team that works on this product.
https://issues.oss-fuzz.com/issues/442161254

Reference Info: 442161254 elfutils:fuzz-libdwfl: Crash in load_shdr_wrlock
component:  Public Trackers > 1362134 > OSS Fuzz
status:  New
reporter:  87...@developer.gserviceaccount.com
cc:  da...@adalogics.com, elfutils-devel@sourceware.org, ev...@gmail.com,
and 1 more
collaborators:  co...@oss-fuzz.com
type:  Vulnerability
access level:  Default access
priority:  P2
severity:  S2
hotlist:  Reproducible, Stability-UndefinedBehaviorSanitizer
retention:  Component default
Project:  elfutils
Reported:  Aug 31, 2025

87...@developer.gserviceaccount.com added comment #1:
Detailed Report: https://oss-fuzz.com/testcase?key=5773761388544000

Project: elfutils
Fuzzing Engine: libFuzzer
Fuzz Target: fuzz-libdwfl
Job Type: libfuzzer_ubsan_elfutils
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x7e8ec315b9b4
Crash State:
   load_shdr_wrlock
   gelf_getshdr
   scn_dwarf_type

Sanitizer: undefined (UBSAN)

Recommended Security Severity: Medium

Regressed:
https://oss-fuzz.com/revisions?job=libfuzzer_ubsan_elfutils&range=202508201802:202508210000

Reproducer Testcase:
https://oss-fuzz.com/download?testcase_id=5773761388544000

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for
instructions to reproduce this bug locally.
When you fix this bug, please
   * mention the fix revision(s).
   * state whether the bug was a short-lived regression or an old bug in any
stable releases.
   * add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any
other feedback, please file an issue at
https://github.com/google/oss-fuzz/issues. Comments on individual Monorail
issues are not monitored.


Generated by Google IssueTracker notification system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://sourceware.org/pipermail/elfutils-devel/attachments/20250831/b1347e30/attachment.htm>