https://sourceware.org/bugzilla/show_bug.cgi?id=29000
--- Comment #1 from Evgeny Vereshchagin <evvers at ya dot ru> --- Created attachment 14036 --> https://sourceware.org/bugzilla/attachment.cgi?id=14036&action=edit file triggering issue in fuzz-libdwfl The same issue was found by fuzz-libdwfl. ``` make -C tests fuzz-libdwfl LD_LIBRARY_PATH="$(pwd)/libelf;$(pwd)/libdw" DEBUGINFOD_URLS= valgrind --track-origins=yes ./tests/fuzz-libdwfl ../clusterfuzz-testcase-minimized-fuzz-libdwfl-4725021634854912 ``` ``` Running: ../clusterfuzz-testcase-minimized-fuzz-libdwfl-4725021634854912 ==65641== Conditional jump or move depends on uninitialised value(s) ==65641== at 0x4868734: elf_compress_gnu (elf_compress_gnu.c:155) ==65641== by 0x489EF0E: check_section (dwarf_begin_elf.c:210) ==65641== by 0x489F6D2: global_read (dwarf_begin_elf.c:409) ==65641== by 0x489F6D2: dwarf_begin_elf (dwarf_begin_elf.c:560) ==65641== by 0x48C033C: load_dw (dwfl_module_getdwarf.c:1342) ==65641== by 0x48C0500: find_dw (dwfl_module_getdwarf.c:1392) ==65641== by 0x48C0500: dwfl_module_getdwarf (dwfl_module_getdwarf.c:1447) ==65641== by 0x401512: LLVMFuzzerTestOneInput (fuzz-libdwfl.c:45) ==65641== by 0x401248: main (fuzz-main.c:33) ==65641== Uninitialised value was created by a heap allocation ==65641== at 0x484486F: malloc (vg_replace_malloc.c:381) ==65641== by 0x48606C6: convert_data (elf_getdata.c:168) ==65641== by 0x48606C6: __libelf_set_data_list_rdlock (elf_getdata.c:457) ==65641== by 0x48608C7: __elf_getdata_rdlock (elf_getdata.c:564) ==65641== by 0x486870A: elf_compress_gnu (elf_compress_gnu.c:150) ==65641== by 0x489EF0E: check_section (dwarf_begin_elf.c:210) ==65641== by 0x489F6D2: global_read (dwarf_begin_elf.c:409) ==65641== by 0x489F6D2: dwarf_begin_elf (dwarf_begin_elf.c:560) ==65641== by 0x48C033C: load_dw (dwfl_module_getdwarf.c:1342) ==65641== by 0x48C0500: find_dw (dwfl_module_getdwarf.c:1392) ==65641== by 0x48C0500: dwfl_module_getdwarf (dwfl_module_getdwarf.c:1447) ==65641== by 0x401512: LLVMFuzzerTestOneInput (fuzz-libdwfl.c:45) ==65641== by 0x401248: main (fuzz-main.c:33) ==65641== Done: ../clusterfuzz-testcase-minimized-fuzz-libdwfl-4725021634854912: (1087 bytes) ``` -- You are receiving this mail because: You are on the CC list for the bug.