[Bug binutils/22154] heap-based buffer overflow in get_line_filename_and_dirname (dwarf.c)

[ago at gentoo dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=22154

--- Comment #2 from Agostino Sarubbo <ago at gentoo dot org> ---
I can reproduce also with 2.28 and 2.28.1:

(valgrind info of 2.28.1)

==30328== Invalid read of size 1
==30328==    at 0x4370F2: get_line_filename_and_dirname (dwarf.c:4091)
==30328==    by 0x4370F2: display_debug_macro (dwarf.c:4249)
==30328==    by 0x425784: display_debug_section (readelf.c:13105)
==30328==    by 0x425784: process_section_contents (readelf.c:13180)
==30328==    by 0x425784: process_object (readelf.c:16885)
==30328==    by 0x401FCE: process_file (readelf.c:17259)
==30328==    by 0x401FCE: main (readelf.c:17330)
==30328==  Address 0x542e204 is 0 bytes after a block of size 340 alloc'd
==30328==    at 0x4C2BF0F: malloc (vg_replace_malloc.c:299)
==30328==    by 0x405338: get_data (readelf.c:392)
==30328==    by 0x4226CE: load_specific_debug_section.part.12 (readelf.c:12918)
==30328==    by 0x43660D: display_debug_macro (dwarf.c:4127)
==30328==    by 0x425784: display_debug_section (readelf.c:13105)
==30328==    by 0x425784: process_section_contents (readelf.c:13180)
==30328==    by 0x425784: process_object (readelf.c:16885)
==30328==    by 0x401FCE: process_file (readelf.c:17259)
==30328==    by 0x401FCE: main (readelf.c:17330)

-- 
You are receiving this mail because:
You are on the CC list for the bug.