out-of-bounds read / crash in elfutils tools (readelf, nm, ...) with malformed file

Hanno Böck hanno at hboeck.de
Sat Nov 8 16:10:39 UTC 2014


Am Sat, 8 Nov 2014 15:04:16 +0100
schrieb Mark Wielaard <mjw at redhat.com>:

> I have pushed all three fuzz-robustify patches to master.

Yeah, seems robustness improved a lot. I couldn't trivially find
another crasher in readelf on git head, however here are three more in
nm. Seems they only crash on 32 bit.

cu,
-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno at hboeck.de
GPG: BBB51E42
-------------- next part --------------
A non-text attachment was scrubbed...
Name: elfutils-nm-crasher.tar.xz
Type: application/x-xz
Size: 2024 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/elfutils-devel/attachments/20141108/e37620a2/attachment.xz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/elfutils-devel/attachments/20141108/e37620a2/attachment.sig>


More information about the elfutils-devel mailing list