[Bug gas/24538] New: GAS crashes caused by corrupted input files

[mtest1 at testlt dot pl]

https://sourceware.org/bugzilla/show_bug.cgi?id=24538

            Bug ID: 24538
           Summary: GAS crashes caused by corrupted input files
           Product: binutils
           Version: 2.32
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: gas
          Assignee: unassigned at sourceware dot org
          Reporter: mtest1 at testlt dot pl
  Target Milestone: ---

Created attachment 11767
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11767&action=edit
input files and crash logs

I would like to submit information about crashes in "GNU as" we've found. All
crashes are caused by corrupted files (attached).

There are many of them, so we've tried to group them for easier analysis (look
at point 4).

Found by: Mateusz Kocielski, Michal Dardas from LogicalTrust

1. Used machine
CPU: Intel(R) Core(TM) i5-5200U CPU @ 2.20GHz
Ram: 8 GB
OS: Kali Linux, 4.17.0-kali1-amd64
gcc version 8.1.0 (Debian 8.1.0-12)

2. Compilation process
# git clone --depth 1 git://sourceware.org/git/binutils-gdb.git
# cd binutils-gdb
# LDFLAGS="-lasan" LDADD="-lasan" CFLAGS="-fsanitize=address -ggdb -O0"
./configure --enable-targets=all
# make -j4
# cd gas
# archs="alpha arm i386 ia64 mcore mips ppc rs6000 sh tic4x tic54x x86_64" \
for arch in $archs; do \
    echo $arch ; \
    make clean ; \
    LDFLAGS="-lasan" LDADD="-lasan" CFLAGS="-fsanitize=address -ggdb -O0"
./configure --prefix=`pwd`/bin/ --target=$arch-elf ; \
    make -j4 ; \
    cp as-new as-$arch ; \
done \

3. "as" version
# for as in $(ls as-*); do echo "Binary: $as"; echo `./$as --version | grep
ass`; done
Binary: as-alpha
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `alpha-elf'.
Binary: as-arm
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `arm-elf'.
Binary: as-i386
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `i386-elf'.
Binary: as-ia64
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `ia64-elf'.
Binary: as-mcore
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `mcore-elf'.
Binary: as-mips
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `mips-elf'.
Binary: as-ppc
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `ppc-elf'.
Binary: as-rs6000
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `rs6000-elf'.
Binary: as-sh
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `sh-elf'.
Binary: as-tic4x
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `tic4x-elf'.
Binary: as-tic54x
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `tic54x-elf'.
Binary: as-x86_64
GNU assembler (GNU Binutils) 2.32.51.20190414 This assembler was configured for
a target of `x86_64-elf'.

4. Crashes
There are 22 directories which names are related to a line of code at which a
crash occurred. Every directory contains files using following convention:
crash_{binary-name}_{test-case} - crash from ASAN
{test-case} - test case file. To reproduce run as (in corresponding
architecture): ./as {test-case}
for example, directory ini386_output_nopsconfig_tc-i386.c:1302 contains files:
crash_as-i386_nop-1.s_1000066.out.min - ASAN log, to reproduce: # as-i386
nop-1.s_1000066.out.min
crash_as-i386_nop-6.s_i386_2750877559.out.min - ASAN log, to reproduce: #
as-i386 nop-6.s_i386_2750877559.out.min
crash_as-x86_64_nop-1.s_1000066.out.min - ASAN log, to reproduce: # as-x86_64
nop-1.s_1000066.out.min
crash_as-x86_64_nop-6.s_i386_2750877559.out.min - ASAN log, to reproduce: #
as-x86_64 nop-6.s_i386_2750877559.out.min
nop-1.s_1000066.out.min - test case
nop-6.s_i386_2750877559.out.min - test case

-- 
You are receiving this mail because:
You are on the CC list for the bug.