37 lines
No EOL
2 KiB
Text
37 lines
No EOL
2 KiB
Text
Source: https://sourceware.org/bugzilla/show_bug.cgi?id=21582
|
|
|
|
I have been fuzzing objdump with American Fuzzy Lop and AddressSanitizer.
|
|
|
|
Please find attached the minimized file causing the issue ("Input") and the
|
|
ASAN report log ("Output"). Below is the reduced stacktrace with links to the
|
|
corresponding source lines on a GitHub mirror.
|
|
|
|
The command I used was `objdump -D <file>`.
|
|
|
|
Let me know if there is any additional information I can provide.
|
|
|
|
--
|
|
|
|
Input: ef51bcdcaae667058b002f94b5dafd05.12926af7cc4fab77f87a3ec70a329100.min
|
|
Output: ef51bcdcaae667058b002f94b5dafd05.12926af7cc4fab77f87a3ec70a329100.txt
|
|
|
|
Error in "ieee_object_p": stack-buffer-overflow
|
|
in ieee_object_p at bfd/ieee.c:1985
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/ieee.c#L1985)
|
|
in bfd_check_format_matches at bfd/format.c:311
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/format.c#L311)
|
|
in display_object_bfd at binutils/objdump.c:3602
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3602)
|
|
in display_any_bfd at binutils/objdump.c:3693
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3693)
|
|
in display_file at binutils/objdump.c:3714
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L3714)
|
|
in main at binutils/objdump.c:4016
|
|
(see https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L4016)
|
|
|
|
Additional Information:
|
|
The command used was `objdump -D <file>`. The compilation flags used were `-g -O2 -fno-omit-frame-pointer -fsanitize=address -fno-sanitize-recover=undefined`. The configuration settings used were `--enable-targets=all --disable-shared`.
|
|
|
|
|
|
Proof of Concept:
|
|
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42202.zip |