From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pj1-x1048.google.com (mail-pj1-x1048.google.com [IPv6:2607:f8b0:4864:20::1048]) by sourceware.org (Postfix) with ESMTPS id D945B3858426 for ; Mon, 20 Feb 2023 11:15:42 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org D945B3858426 Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=chromium.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com Received: by mail-pj1-x1048.google.com with SMTP id c13-20020a17090ab28d00b0023406b78560so170425pjr.8 for ; Mon, 20 Feb 2023 03:15:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=to:from:subject:message-id:references:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=cO4R+HdyXVaCQA+aG0Fh56s47DW9E+iYn+gE2yFCrfQ=; b=CVvApn6fgYwVqjDwAfrMUAn4obnhPom5eVXBUsr4G50NUadtZRrYzOQvUGipNJTYUO 3DiKHX5JqksBpTMNaM5z2OTMaJjF7SoL3nCVig00wDhyvC5Mhi/0ky8rfQjDfKsm0AGD AffraAOxJcIOlTqIFXJHlXeMKY/7nt6lZXb8E= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:from:subject:message-id:references:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=cO4R+HdyXVaCQA+aG0Fh56s47DW9E+iYn+gE2yFCrfQ=; b=XZJ6igq/7DVAWm3FzlWNUyPSpBTtkOjwut4JF8R3v3v0G5TeBiUCH/JbalW7R3DxkD QdZJX1NTeOe9uZE7RofjEjOllALfLPExipffl6XOyvaN3wzTiEGHXh3/Kv7X2bQMI4Gr pAnkAKiUKhtfqNEKSq2KBNWHlw/9Nn5hT05MC483uroOPrE2zTkCiSlOXGCXkf3tPpoF yQjQGY5jdx4VXIwW5Nzu4B7zt5yItTpR1+TfG6wFqDQ9evCDN+6+zCIsyP+uf2hWPGuy vBrBtJepNqsqVi85rq6UJKUFvgVXQsszqwU8XYk38u9sblIVMpqM9GHENmlFcudx/8Km G9+Q== X-Gm-Message-State: AO0yUKWT3g79Orj7x+ylMf9fPtzwK9eD47tPHg9TjomMMQXcnKBd1oF3 NVxT29bnHEu+Vdgn94fNoBa+EeyayUJBBRQIK3AD+QD3IAefVQk= X-Google-Smtp-Source: AK7set+6DkF5GDURHezZdWAGQIS7Yb7DwtesmuqNPcNaLye26DL6a+x600jE/I/vppQAQs36wzuC02g4Nc2zGRHDre+RJYLVf962 MIME-Version: 1.0 X-Received: by 2002:a05:6638:2146:b0:3c4:dda2:da6e with SMTP id z6-20020a056638214600b003c4dda2da6emr132289jaj.4.1676821581792; Sun, 19 Feb 2023 07:46:21 -0800 (PST) Date: Sun, 19 Feb 2023 07:46:21 -0800 Reply-To: oss-fuzz@monorail-prod.appspotmail.com References: <0=71cc74a7ba1af446b7ed6b9a08b414d9=71ed1158a93bd261e0f438319391130d=oss-fuzz@monorail-prod.appspotmail.com> X-Google-Appengine-App-Id: s~monorail-prod X-Google-Appengine-App-Id-Alias: monorail-prod Message-ID: <000000000000bc0d2905f50f726a@google.com> Subject: Issue 56134 in oss-fuzz: elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section From: =?UTF-8?Q?evv=E2=80=A6_via_monorail?= To: elfutils-devel@sourceware.org Content-Type: multipart/alternative; boundary="000000000000bc0d1105f50f7267" X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,DATE_IN_PAST_12_24,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: --000000000000bc0d1105f50f7267 Content-Type: text/plain; charset="UTF-8" Comment #2 on issue 56134 by evv...@gmail.com: elfutils:fuzz-libdwfl: Use-of-uninitialized-value in check_section https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56134#c2 It can be confirmed with Valgrind: ``` wget -O OSS-FUZZ-56134 'https://oss-fuzz.com/download?testcase_id=6724057145147392' LD_LIBRARY_PATH="$(pwd)/libdw:$(pwd)/libelf" DEBUGINFOD_URLS= valgrind --track-origins=yes ./src/readelf -w OSS-FUZZ-56134 ==1373524== Memcheck, a memory error detector ==1373524== Copyright (C) 2002-2022, and GNU GPL'd, by Julian Seward et al. ==1373524== Using Valgrind-3.19.0 and LibVEX; rerun with -h for copyright info ==1373524== Command: ./src/readelf -w OSS-FUZZ-56134 ==1373524== ==1373524== Conditional jump or move depends on uninitialised value(s) ==1373524== at 0x4887EAB: check_section (dwarf_begin_elf.c:265) ==1373524== by 0x48885EF: global_read (dwarf_begin_elf.c:444) ==1373524== by 0x48885EF: dwarf_begin_elf (dwarf_begin_elf.c:595) ==1373524== by 0x48A9F0C: load_dw (dwfl_module_getdwarf.c:1341) ==1373524== by 0x48AA0D0: find_dw (dwfl_module_getdwarf.c:1391) ==1373524== by 0x48AA0D0: dwfl_module_getdwarf (dwfl_module_getdwarf.c:1446) ==1373524== by 0x411109: print_debug (readelf.c:11467) ==1373524== by 0x413A31: process_elf_file (readelf.c:1062) ==1373524== by 0x4148BC: process_dwflmod (readelf.c:818) ==1373524== by 0x48A7F20: dwfl_getmodules (dwfl_getmodules.c:86) ==1373524== by 0x40954A: process_file (readelf.c:926) ==1373524== by 0x404D0E: main (readelf.c:395) ==1373524== Uninitialised value was created by a heap allocation ==1373524== at 0x484586F: malloc (vg_replace_malloc.c:381) ==1373524== by 0x48FEA25: convert_data (elf_getdata.c:166) ==1373524== by 0x48FEA25: __libelf_set_data_list_rdlock (elf_getdata.c:455) ==1373524== by 0x48FEC17: __elf_getdata_rdlock (elf_getdata.c:562) ==1373524== by 0x4887E6F: check_section (dwarf_begin_elf.c:246) ==1373524== by 0x48885EF: global_read (dwarf_begin_elf.c:444) ==1373524== by 0x48885EF: dwarf_begin_elf (dwarf_begin_elf.c:595) ==1373524== by 0x48A9F0C: load_dw (dwfl_module_getdwarf.c:1341) ==1373524== by 0x48AA0D0: find_dw (dwfl_module_getdwarf.c:1391) ==1373524== by 0x48AA0D0: dwfl_module_getdwarf (dwfl_module_getdwarf.c:1446) ==1373524== by 0x411109: print_debug (readelf.c:11467) ==1373524== by 0x413A31: process_elf_file (readelf.c:1062) ==1373524== by 0x4148BC: process_dwflmod (readelf.c:818) ==1373524== by 0x48A7F20: dwfl_getmodules (dwfl_getmodules.c:86) ==1373524== by 0x40954A: process_file (readelf.c:926) ==1373524== ./src/readelf: cannot get debug context descriptor: No DWARF information found ``` -- You received this message because: 1. You were specifically CC'd on the issue You may adjust your notification preferences at: https://bugs.chromium.org/hosting/settings Reply to this email to add a comment. --000000000000bc0d1105f50f7267--