Found a bug in objdump-2.34

2020-03-03 Thread Natalie
Hi, I found a bug in objdump-2.34 by my fuzzing research tool (not published yet), which I ran with ASAN and shows the information below. Information and also the 11 similar crashes in an archive file are in the attachment. I hope this will help. natalie@mars:~/Research/Bug$ ./objdump

Information leakage in nm-2.32

2019-08-20 Thread Natalie
Dear team, I found a crash with AFL and used valgrind to run it. Looks like it is information leakage problem. Detailed information shows below. Could you possibly fix this issue? It would be very nice if a CVE number can be assigned to this. Also a poc is attched to the email. Best regards,