[Bug gas/20896] AS: Buffer Overflow when expanding .irp directives

[boehme.marcel at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=20896

--- Comment #5 from Marcel Böhme <boehme.marcel at gmail dot com> ---
Hi Alan,

If you wish, we can stop reporting assertion failures which might be considered
false positives for fuzzed input; but I suppose you are interested in buffer
overflows and other crashes, which could cause difficult-to-localize problems
in the tool chain or even risks to a system's security. Quite sure that several
of our test cases translate into some actual user test cases. 

Here is one for the IRP directive:

        .global _start

        .text
_start:
        ;# write(1, message, 13)
.irp param,1,2,3
        ;# 3 "Here be dragons
        mov     $1, %rax
        mov     $1, %rdi
        mov     $message, %rsi
        mov     $13, %rdx
        syscall
.endr
        ;# exit(0)
        mov     $60, %rax
        xor     %rdi, %rdi
        syscall
message:
        .ascii  "Hello, world\n"

-- 
You are receiving this mail because:
You are on the CC list for the bug.