Hi, I found a bug in objdump-2.34 by my fuzzing research tool (not published
yet), which I ran with ASAN and shows the information below.
Information and also the 11 similar crashes in an archive file are in the
attachment.
I hope this will help.
natalie@mars:~/Research/Bug$ ./objdump
Dear team,
I found a crash with AFL and used valgrind to run it. Looks like it is
information leakage problem. Detailed information shows below.
Could you possibly fix this issue? It would be very nice if a CVE number can be
assigned to this.
Also a poc is attched to the email.
Best regards,