https://sourceware.org/bugzilla/show_bug.cgi?id=34813

            Bug ID: 34813
           Summary: GNU ld MIPS synthetic special sections cause NULL
                    dereferences in diagnostics
           Product: binutils
           Version: 2.46
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: ld
          Assignee: unassigned at sourceware dot org
          Reporter: basavesh.shivakumar at wsu dot edu
  Target Milestone: ---

Created attachment 17133
  --> https://sourceware.org/bugzilla/attachment.cgi?id=17133&action=edit
repro

I'm reporting this bug on behalf of my team: Ananta Srikar Puranam, Emily West,
Dr. Swarn Priya, Dr. Peng Gao and Dr. Basavesh Ammanaghatta Shivakumar.

Summary
=======

MIPS SHN_MIPS_ACOMMON and SHN_MIPS_TEXT symbols make current and released GNU
ld dereference NULL bfd_elf_section_data while formatting either a
common-alignment warning or a multiple-definition location; minimized ordinary
and SHN_MIPS_SCOMMON controls avoid both target sites.

Reproduction
============

1. Download and extract
`bfd-mips-acommon-alignment-warning-null-dereference-reproducer.tar.gz`.
2. Run the following command with an ld.bfd or all-target `ld-new` binary that
   supports the emulation used by the reproducer:

       BFD=/path/to/ld-new sh repro.sh

The archive contains the fixed input files, independent controls, helper
scripts needed by `repro.sh`, and their checksums. The script uses a temporary
directory and does not modify the source tree.

Observed result
===============

MIPS SHN_MIPS_ACOMMON and SHN_MIPS_TEXT symbols make current and released GNU
ld dereference NULL bfd_elf_section_data while formatting either a
common-alignment warning or a multiple-definition location; minimized ordinary
and SHN_MIPS_SCOMMON controls avoid both target sites.

Expected result
===============

GNU ld should either produce the correct output or reject the input with a
normal diagnostic. It should not crash, hang, execute undefined behavior, read
outside an input-derived allocation, or produce the described malformed
output.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to