Issue 443547551: elfutils:fuzz-libdwfl: Null-dereference READ in process_file

[buganizer-system@google.com]

Replying to this email means your email address will be shared with the
team that works on this product.
https://issues.oss-fuzz.com/issues/443547551

Reference Info: 443547551 elfutils:fuzz-libdwfl: Null-dereference READ in
process_file
component:  Public Trackers > 1362134 > OSS Fuzz
status:  New
reporter:  87...@developer.gserviceaccount.com
cc:  da...@adalogics.com, elfutils-devel@sourceware.org, ev...@gmail.com,
and 1 more
collaborators:  co...@oss-fuzz.com
type:  Bug
access level:  Default access
priority:  P2
severity:  S4
hotlist:  Reproducible, Stability-Memory-AddressSanitizer
retention:  Component default
Project:  elfutils
Reported:  Sep 8, 2025

87...@developer.gserviceaccount.com added comment #1:
Detailed Report: https://oss-fuzz.com/testcase?key=6696954508935168

Project: elfutils
Fuzzing Engine: afl
Fuzz Target: fuzz-libdwfl
Job Type: afl_asan_elfutils
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000000
Crash State:
   process_file
   dwfl_report_offline
   fuzz-libdwfl.c

Sanitizer: address (ASAN)

Regressed:
https://oss-fuzz.com/revisions?job=afl_asan_elfutils&range=202509061200:202509061801

Reproducer Testcase:
https://oss-fuzz.com/download?testcase_id=6696954508935168

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for
instructions to reproduce this bug locally.
When you fix this bug, please
   * mention the fix revision(s).
   * state whether the bug was a short-lived regression or an old bug in any
stable releases.
   * add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any
other feedback, please file an issue at
https://github.com/google/oss-fuzz/issues. Comments on individual Monorail
issues are not monitored.


Generated by Google IssueTracker notification system.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://sourceware.org/pipermail/elfutils-devel/attachments/20250907/129abb8d/attachment-0001.htm>