out-of-bounds read / crash in elfutils tools (readelf, nm, ...) with malformed file

Hanno Böck hanno at hboeck.de
Fri Nov 7 00:27:11 UTC 2014


Am Thu, 06 Nov 2014 16:11:43 +0100
schrieb Mark Wielaard <mjw at redhat.com>:

> > (actually this bug report is kind of a fallout of a bug search in
> > libbfd - various parser bugs in the binutils-tools have been found
> > and fixed in the past days and I thought I'd run other elf-related
> > tools on the collection of bug-exposing binaries)
> 
> Thanks. If you have any other examples please do report them.

Ten to crash readelf -a attached, according to american-fuzzy-lop all
distinct code paths.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: eu-readelf-crasher.tar.xz
Type: application/x-xz
Size: 2176 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/elfutils-devel/attachments/20141107/ffb9f4e6/attachment-0001.xz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/elfutils-devel/attachments/20141107/ffb9f4e6/attachment-0001.sig>


More information about the elfutils-devel mailing list