https://sourceware.org/bugzilla/show_bug.cgi?id=25958
Bug ID: 25958 Summary: [objdump] crash with -d flag in linux/raise.c:54 Product: binutils Version: 2.34 Status: UNCONFIRMED Severity: normal Priority: P2 Component: binutils Assignee: unassigned at sourceware dot org Reporter: dkcjd2000 at gmail dot com Target Milestone: --- Created attachment 12516 --> https://sourceware.org/bugzilla/attachment.cgi?id=12516&action=edit crash test case Hello, Im' currently running my fuzzing technique on binutils 2.34, and I found a crash on objdump I build it with gcc 5.4.0 on Ubuntu 16.04 You can reproduce with the following command: ./objdump -d <attached file> The stack trace of crash is : Program received signal SIGABRT, Aborted. 0x00007ffff783e428 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 54 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt #0 0x00007ffff783e428 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:54 #1 0x00007ffff784002a in __GI_abort () at abort.c:89 #2 0x00007ffff78807ea in __libc_message (do_abort=do_abort@entry=2, fmt=fmt@entry=0x7ffff7999ed8 "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175 #3 0x00007ffff788937a in malloc_printerr (ar_ptr=<optimized out>, ptr=<optimized out>, str=0x7ffff7996caf "free(): invalid pointer", action=3) at malloc.c:5006 #4 _int_free (av=<optimized out>, p=<optimized out>, have_lock=0) at malloc.c:3867 #5 0x00007ffff788d53c in __GI___libc_free (mem=<optimized out>) at malloc.c:2968 #6 0x00000000004cb960 in _bfd_coff_free_symbols (abfd=<optimized out>) at coffgen.c:1782 #7 _bfd_coff_close_and_cleanup (abfd=0x85fce0) at coffgen.c:3180 #8 0x000000000046132a in bfd_close_all_done (abfd=0x85fce0) at opncls.c:789 #9 0x0000000000403508 in display_file (filename=0x7fffffffe580 "./objdump_TC_SEL_BYTE_RANDOM_1/id_000000_cmpid_025424_belong_045814", target=<optimized out>, last_file=<optimized out>) at ./objdump.c:5003 #10 main (argc=<optimized out>, argv=<optimized out>) at ./objdump.c:5349 Thank you, Ahcheong Lee -- You are receiving this mail because: You are on the CC list for the bug.