This function has a gas_assert, ie. possible call to as_abort, which calls as_report_context, which calls as_info_where. Attached fuzzer testcase managed to trigger a stack overflow. * messages.c (as_info_where): Don't gas_assert. diff --git a/gas/messages.c b/gas/messages.c index 0db075d779c..7c018acf69f 100644 --- a/gas/messages.c +++ b/gas/messages.c @@ -141,8 +141,6 @@ as_info_where (const char *file, unsigned int line, unsigned int indent, va_list args; char buffer[2000]; - gas_assert (file != NULL && line > 0 && indent <= INT_MAX); - va_start (args, format); vsnprintf (buffer, sizeof (buffer), format, args); va_end (args); -- Alan Modra Australia Development Lab, IBM