[Bug binutils/29495] New: Bug report

[sophrosx at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=29495

            Bug ID: 29495
           Summary: Bug report
           Product: binutils
           Version: 2.40 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: sophrosx at gmail dot com
  Target Milestone: ---

Created attachment 14282
  --> https://sourceware.org/bugzilla/attachment.cgi?id=14282&action=edit
testcases for strip-new

Hello,

I detected some new memory leak and dead loop problems through fuzz testing,
which I think may be a vulnerability.

The configuration of binutils is:

$  ./configure --disable-shared && make -j

and compiled with gcc (Ubuntu 7.5.0-3ubuntu1~18.04) 7.5.0

I use the program strip-new in "~/binutils-gdb/binutils/strip-new" in master
branch[https://github.com/bminor/binutils-gdb/tree/master] with parameter "-o
tmp ./testcase", and after waiting 20 minutes, the program neither giving any
outputs nor terminating. What is more, the program strip-new occupied all the
memory.

The testcase that trigger such results are in the attachment. If there is
anything I am unclear about or need to discuss further, please feel free to
contact me~

Looking forward to your reply!

Thanks & Best Regards

-- 
You are receiving this mail because:
You are on the CC list for the bug.