From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <3Avs2Yg0bAOsZbabeNVY-cebQNccVQ.TbbTYRhfRePbagRag.PbZ@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com> Received: from mail-il1-x147.google.com (mail-il1-x147.google.com [IPv6:2607:f8b0:4864:20::147]) by sourceware.org (Postfix) with ESMTPS id C3AFF3858407 for ; Sun, 20 Mar 2022 09:59:30 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org C3AFF3858407 Received: by mail-il1-x147.google.com with SMTP id m17-20020a923f11000000b002c10e8f4c44so6296790ila.1 for ; Sun, 20 Mar 2022 02:59:30 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:date:reply-to:references:message-id :subject:from:to; bh=3kii95nVK1yBeIv/+WY0Mop6Ua0wZ18zVgiOIumb8WM=; b=BwhqRO3HEO8MVbQNwZKZuQscJxKahPmUYFy7DZDLVTrq6VNWyONQUTfjxHLaPvWUdG cYBeYvpUV01/c2vEina3i+TJEos1qNXbRZm/V1neU917jKulOrjsezV0vH7F7mBbK6qX s+Cvd1WY4h4ILnBfDO0fnrcQYRpquf1OXdveDvVIngW9fHgkHPOa/4NWobPqn0nogUuh hcNtS6JNz3Cw7rkwUt0Ksfie/OYNify0dhAk+Rmok1pR+Ff9bGRExo/GxrVZiXTIlPRn M7t2CxYYcsS9+38j2MJKo9grsGrtMmJ9e6xnBF49NATOpJPhmmELlJKuWkj4VekRL5G2 axtw== X-Gm-Message-State: AOAM531l/vLpDMcVxxquc85zJikUHTobGvZunjpqfriiRNecy0b7wY0v oZFZ4nU+N7hJjpmJVfurS2xfocX7WJ0CurDjtHzhrmrWuiAB X-Google-Smtp-Source: ABdhPJxLnWnxAKxY2ln2qxecPH0eKR/QUir8IQz9sP7opdWDqAiXs37cHYeOD1Y3e+aCh7ucdCrtnpDmlAGprbVDtDmvYyZ5ZH9k MIME-Version: 1.0 X-Received: by 2002:a92:194c:0:b0:2c8:2a07:74e7 with SMTP id e12-20020a92194c000000b002c82a0774e7mr108187ilm.272.1647770370202; Sun, 20 Mar 2022 02:59:30 -0700 (PDT) Date: Sun, 20 Mar 2022 02:59:30 -0700 Reply-To: oss-fuzz@monorail-prod.appspotmail.com References: <0=71cc74a7ba1af446b7ed6b9a08b414d9=9ff75cc524d7cf4f3afc3bed32a44aa1=oss-fuzz@monorail-prod.appspotmail.com> X-Google-Appengine-App-Id: s~monorail-prod X-Google-Appengine-App-Id-Alias: monorail-prod Message-ID: <0000000000009663f305daa36fec@google.com> Subject: Issue 45634 in oss-fuzz: elfutils:fuzz-libdwfl: Misaligned-address in file_read_elf From: =?UTF-8?B?ZGHigKYgdmlhIG1vbm9yYWls?= To: elfutils-devel@sourceware.org X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: elfutils-devel@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Elfutils-devel mailing list List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2022 09:59:32 -0000 Comment #1 on issue 45634 by da...@adalogics.com: elfutils:fuzz-libdwfl: Misaligned-address in file_read_elf https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45634#c1 UBSAN report Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/crash-59b5bfa44a73565527249e5a6d13b3c2a9761f29 elf_begin.c:225:21: runtime error: member access within misaligned address 0x7f9d7642404c for type 'Elf64_Shdr', which requires 8 byte alignment 0x7f9d7642404c: note: pointer points here 02 01 01 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ^ #0 0x56a2ad in get_shnum /src/elfutils/libelf/elf_begin.c:225:21 #1 0x56a2ad in file_read_elf /src/elfutils/libelf/elf_begin.c:299:19 #2 0x567596 in __libelf_read_mmaped_file /src/elfutils/libelf/elf_begin.c:566:14 #3 0x56c9dd in read_file /src/elfutils/libelf/elf_begin.c:701:28 #4 0x56c678 in dup_elf /src/elfutils/libelf/elf_begin.c:1067:12 #5 0x56c678 in lock_dup_elf /src/elfutils/libelf/elf_begin.c:1119:10 #6 0x56c17e in elf_begin /src/elfutils/libelf/elf_begin.c:0 #7 0x4b5782 in process_archive /src/elfutils/libdwfl/offline.c:251:17 #8 0x4b5782 in process_file /src/elfutils/libdwfl/offline.c:125:14 #9 0x4b5e9f in __libdwfl_report_offline /src/elfutils/libdwfl/offline.c:287:22 #10 0x4b5e9f in dwfl_report_offline /src/elfutils/libdwfl/offline.c:316:10 #11 0x4b2f88 in LLVMFuzzerTestOneInput /src/fuzz-libdwfl.c:47:22 #12 0x43da32 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:611:15 #13 0x4295e2 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:324:6 #14 0x42ee4c in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:860:9 #15 0x4577e2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #16 0x7f9d760b90b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/libc-start.c:308:16 #17 0x407d2d in _start SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior elf_begin.c:225:21 in -- You received this message because: 1. You were specifically CC'd on the issue You may adjust your notification preferences at: https://bugs.chromium.org/hosting/settings Reply to this email to add a comment.