https://sourceware.org/bugzilla/show_bug.cgi?id=28175
Bug ID: 28175 Summary: Segment fault on `nm-new -a -l` Product: binutils Version: 2.38 (HEAD) Status: UNCONFIRMED Severity: normal Priority: P2 Component: binutils Assignee: unassigned at sourceware dot org Reporter: shaohua.li at inf dot ethz.ch Target Milestone: --- Created attachment 13585 --> https://sourceware.org/bugzilla/attachment.cgi?id=13585&action=edit poc Hi there, I crashed `nm-new -a -l` with a fuzzer. - binutils version: 2.38(Head), commit af51804103a08cd1e12edc4f4a30eec2c5c4f9e8 - Compiler: clang12 - Platform: Ubuntu 18.04.5 LTS, x86_64 - Reproduce: run `nm-new -a -l poc` AddressSanitizer report: ==640==ERROR: AddressSanitizer: SEGV on unknown address 0x621050000558 (pc 0x000000ced0ab bp 0x7ffff11c0d70 sp 0x7ffff11c0ca0 T0) ==640==The signal is caused by a READ memory access. #0 0xced0ab in reloc_processing /binutils_latest/repo/bfd/coff-tic30.c:165:35 #1 0xceac05 in coff_slurp_reloc_table /binutils_latest/repo/bfd/./coffcode.h:5120:7 #2 0xce63d8 in coff_canonicalize_reloc /binutils_latest/repo/bfd/./coffcode.h:5238:13 #3 0x4e96db in bfd_canonicalize_reloc /binutils_latest/repo/bfd/bfd.c:1579:10 #4 0x4d2276 in get_relocs /binutils_latest/repo/binutils/nm.c:913:25 #5 0x50e6ba in bfd_map_over_sections /binutils_latest/repo/bfd/section.c:1383:5 #6 0x4d147a in print_symbol /binutils_latest/repo/binutils/nm.c:1037:8 #7 0x4ceaeb in print_symbols /binutils_latest/repo/binutils/nm.c:1152:7 #8 0x4cd23c in display_rel_file /binutils_latest/repo/binutils/nm.c:1279:5 #9 0x4c97dd in display_file /binutils_latest/repo/binutils/nm.c:1446:7 #10 0x4c90db in main /binutils_latest/repo/binutils/nm.c:1965:12 #11 0x7fda9a2cb0b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2) #12 0x41c55d in _start (/out_bin/nm-new+0x41c55d) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV /binutils_latest/repo/bfd/coff-tic30.c:165:35 in reloc_processing ==640==ABORTING -- You are receiving this mail because: You are on the CC list for the bug.