[Bug binutils/18850] New: sh_info not verified in VERNEED sections

[address@hidden]

https://sourceware.org/bugzilla/show_bug.cgi?id=18850

            Bug ID: 18850
           Summary: sh_info not verified in VERNEED sections
           Product: binutils
           Version: 2.25
            Status: NEW
          Severity: minor
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: address@hidden
  Target Milestone: ---

Created attachment 8533
  --> https://sourceware.org/bugzilla/attachment.cgi?id=8533&action=edit
ELF file with wrong VERNEED sh_info

Using afl-fuzz I discovered that the attached file causes an excessive list of
dependencies to be displayed by objdump -p:
Version References:
  required from libc.so.6:
    0x09691a75 0x00 02 GLIBC_2.2.5
  required from libc.so.6:
    0x09691a75 0x00 02 GLIBC_2.2.5
  required from libc.so.6:
    0x09691a75 0x00 02 GLIBC_2.2.5
  [ and another 32766 times ]
readelf -a -W complains:
readelf: Error: Reading 0x990 bytes extends past end of file for symbols
readelf: Warning: Corrupt Version Needs structure - offset to next structure is
zero with entries still left to be processed

-- 
You are receiving this mail because:
You are on the CC list for the bug.