From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: multipart/mixed; boundary="===============4480810841930145861=="
MIME-Version: 1.0
From: Mark Wielaard <mjw@redhat.com>
To: elfutils-devel@lists.fedorahosted.org
Subject: Re: out-of-bounds read / crash in elfutils tools (readelf, nm,
 ...) with malformed file
Date: Tue, 11 Nov 2014 14:15:31 +0100
Message-ID: <1415711731.4965.9.camel@bordewijk.wildebeest.org>
In-Reply-To: 20141111113130.6774958b@pc

--===============4480810841930145861==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

On Tue, 2014-11-11 at 11:31 +0100, Hanno B=C3=B6ck wrote:
> I can't build elfutils git head with -m32 right now at all (likely
> another bug? was possible a few days ago)

Replicated on Fedora 21 Beta i686. Fix pushed as attached.

You might need the recently posted "libdwfl: find_dynsym don't assume
dynamic linker has adjusted DYNAMIC entries." patch to get zero FAIL on
make check.

Thanks,

Mark

--===============4480810841930145861==
Content-Type: text/x-patch
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="0001-libdw-Fix-dwarf_getsrclines.c-32bit-compile-error.patch"
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--===============4480810841930145861==--