[Bug binutils/22858] Crashes found by fuzzer

2018-02-17 Thread spinpx at gmail dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=22858

Peng Chen  changed:

   What|Removed |Added

 CC||spinpx at gmail dot com

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug binutils/22858] New: Crashes found by fuzzer

2018-02-17 Thread spinpx at gmail dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=22858

Bug ID: 22858
   Summary: Crashes found by fuzzer
   Product: binutils
   Version: 2.29
Status: UNCONFIRMED
  Severity: normal
  Priority: P2
 Component: binutils
  Assignee: unassigned at sourceware dot org
  Reporter: spinpx at gmail dot com
  Target Milestone: ---

Created attachment 10830
  --> https://sourceware.org/bugzilla/attachment.cgi?id=10830&action=edit
Input of crashes and analysis

Hi,

I found some crashes in binutils by my developed fuzzer. They are found in nm,
objdump and size program. They are 117 unique inputs in total. Each input has
their unique program trace. Also, I did a simple analysis for these crashes. I
attach the inputs triggering crashes and the report of my analysis for them
(log.json and log_unique.json). 

Environment: Ubuntu16.04 64bit, and "ulimit -Sv 50"(The bug can't be
trigger in unlimted memory..).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/22845] -z separate-code doesn't work right

2018-02-17 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=22845

--- Comment #8 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by H.J. Lu :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d85502cffa5e41db6f2f2e1ba11d4285918dccdb

commit d85502cffa5e41db6f2f2e1ba11d4285918dccdb
Author: H.J. Lu 
Date:   Sat Feb 17 14:54:16 2018 -0800

ld-elf/ehdr_start: Pass --build-id to ld

ld-elf/ehdr_start fails with -z separate-code.  Since there is no data
LOAD segment before code LOAD segment:

There are 2 program headers, starting at offset 64

Program Headers:
  Type   Offset   VirtAddr   PhysAddr   FileSiz 
MemSiz   Flg Align
  LOAD   0x20 0x0060 0x0060 0x10
0x10 R E 0x20
  LOAD   0x40 0x0080 0x0080 0x08
0x08 R   0x20

 Section to Segment mapping:
  Segment Sections...
   00 .text
   01 .rodata

the program header isn't included in any LOAD segment.  As the result,
reference to __ehdr_start is resolved to zero.  Pass --build-id to ld
to add a data LOAD segment before code LOAD segment to put the program
header in the  data LOAD segment.

PR ld/22845
* testsuite/ld-elf/ehdr_start.d: Pass --build-id to ld.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/13671] gld creates i386 relocations not supported by Solaris ld.so.1

2018-02-17 Thread hjl.tools at gmail dot com
https://sourceware.org/bugzilla/show_bug.cgi?id=13671

--- Comment #23 from H.J. Lu  ---
I updated users/hjl/solaris branch.  But I have no idea if elf_i386_tpoff
is correct for Solaris.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/22845] -z separate-code doesn't work right

2018-02-17 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=22845

--- Comment #7 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by H.J. Lu :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=34b00afa0396871f762190b8c436d2a5bf91c9e1

commit 34b00afa0396871f762190b8c436d2a5bf91c9e1
Author: H.J. Lu 
Date:   Sat Feb 17 05:37:37 2018 -0800

ld: Add -z separate-code test for zero size section

PR ld/22845
* testsuite/ld-elf/binutils.exp (tls_opts): Add tests for
"-z noseparate-code" and "-z separate-code".

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils


[Bug ld/22845] -z separate-code doesn't work right

2018-02-17 Thread cvs-commit at gcc dot gnu.org
https://sourceware.org/bugzilla/show_bug.cgi?id=22845

--- Comment #6 from cvs-commit at gcc dot gnu.org  ---
The master branch has been updated by H.J. Lu :

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=92d9e363b5ab7f96a2c8e6d3ae86cf8cc91dca9d

commit 92d9e363b5ab7f96a2c8e6d3ae86cf8cc91dca9d
Author: H.J. Lu 
Date:   Sat Feb 17 05:30:13 2018 -0800

ld-elf/eh4: Pass -z max-page-size=0x20 -z noseparate-code to ld

-z separate-code creates separate code LOAD segment, aligns it to the
maximum page size and places .plt section before .text section.  But
ld-elf/eh4 passes -Ttext 0x400 to linker to place .text section at
address 0x400, which is impossible for linker to accomplish:

$ ld -shared -Ttext 0x400 -z separate-code -o x.so eh4.o
ld: section .eh_frame LMA [0020,0020006b] overlaps
section .plt LMA [0020,0020001f]

Since ld-elf/eh4 also checks exact addresses, this patch passes
-z max-page-size=0x20 -z noseparate-code to ld.

PR ld/22845
* ld-elf/eh4.d: Pass -z max-page-size=0x20 -z noseparate-code
to ld.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
___
bug-binutils mailing list
bug-binutils@gnu.org
https://lists.gnu.org/mailman/listinfo/bug-binutils