[Bug binutils/24927] New: Conditional jump or move depends on uninitialized values trigger in dump

[wang8330 at umn dot edu]

https://sourceware.org/bugzilla/show_bug.cgi?id=24927

            Bug ID: 24927
           Summary: Conditional jump or move depends on uninitialized
                    values trigger in dump
           Product: binutils
           Version: 2.33 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: wang8330 at umn dot edu
  Target Milestone: ---

Created attachment 11959
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11959&action=edit
PoC input

This bug is found in git commit: baf46cd78048e1b959462567556e1de1ef6b9039.

To compile the binutils-gdb repo:

CC=clang \
CFLAGS="-DFORTIFY_SOURCE=2 -fno-omit-frame-pointer -g -Wno-error" \
./configure \
--disable-shared --disable-gdb --disable-libdecnumber --disable-readline \
--disable-sim
make

To trigger the bug:
valgrind ./objdump -D test-input

The output of Valgrind:
==27253== Memcheck, a memory error detector
==27253== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==27253== Using Valgrind-3.13.0 and LibVEX; rerun with -h for copyright info
==27253== Command: ./objdump -D
/home/bwang/Bowen/gitrepo/diffuzz-3/monitor/monitor_out/input.6812
==27253== Parent PID: 6226
==27253== 
==27253== Conditional jump or move depends on uninitialised value(s)
==27253==    at 0x4A01F47: __wmemchr_avx2 (memchr-avx2.S:260)
==27253==    by 0x49614C2: internal_fnwmatch (fnmatch_loop.c:168)
==27253==    by 0x4964868: fnmatch@@GLIBC_2.2.5 (fnmatch.c:434)
==27253==    by 0x48D395: find_target (targets.c:1410)
==27253==    by 0x48D2BC: bfd_set_default_target (targets.c:1444)
==27253==    by 0x450F1E: set_default_bfd_target (bucomm.c:163)
==27253==    by 0x404032: main (objdump.c:4286)
==27253== 
==27253== 
==27253== HEAP SUMMARY:
==27253==     in use at exit: 0 bytes in 0 blocks
==27253==   total heap usage: 871 allocs, 871 frees, 433,025 bytes allocated
==27253== 
==27253== All heap blocks were freed -- no leaks are possible
==27253== 
==27253== For counts of detected and suppressed errors, rerun with: -v
==27253== Use --track-origins=yes to see where uninitialised values come from
==27253== ERROR SUMMARY: 2 errors from 1 contexts (suppressed: 0 from 0)

-- 
You are receiving this mail because:
You are on the CC list for the bug.