From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: multipart/mixed; boundary="===============3487583634198886087=="
MIME-Version: 1.0
From: =?utf-8?q?Hanno_B=C3=B6ck_=3Channo_at_hboeck=2Ede=3E?=
To: elfutils-devel@lists.fedorahosted.org
Subject: Re: out-of-bounds read / crash in elfutils tools (readelf, nm,
 ...) with malformed file
Date: Tue, 11 Nov 2014 14:57:05 +0100
Message-ID: <20141111145705.52983732@pc>
In-Reply-To: 1415714032.4965.10.camel@bordewijk.wildebeest.org

--===============3487583634198886087==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Am Tue, 11 Nov 2014 14:53:52 +0100
schrieb Mark Wielaard <mjw@redhat.com>:

> On Tue, 2014-11-11 at 14:40 +0100, Hanno B=C3=B6ck wrote:
> > I still get a bunch of crashers with correct LD_LIBRARY_PATH on
> > readelf -a with 32 bit compile (CFLAGS=3D"-m32 -g"):
> > sig:11,hash:378b8b26
> > sig:11,hash:1aa8d351
> > sig:11,hash:872fe371
> > from attachment eu-readelf-crasher-hangs-2.tar.xz
> > =

> > and
> > id:000113,src:000000,op:flip32,pos:5474
> > id:000116,src:000000,op:flip32,pos:5554
> > from attachment =

> > /tmp/elfutils-nm-crasher.tar.xz
> =

> Could you attach or post those files somewhere?

These are all in attachments of previous mails in this thread:

eu-readelf-crasher-hangs-2.tar.xz
https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-November/00423=
7.html

elfutils-nm-crasher.tar.xz
https://lists.fedorahosted.org/pipermail/elfutils-devel/2014-November/00424=
9.html

-- =

Hanno B=C3=B6ck
http://hboeck.de/

mail/jabber: hanno@hboeck.de
GPG: BBB51E42

--===============3487583634198886087==
Content-Type: application/pgp-signature
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="signature.asc"
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--===============3487583634198886087==--