[Bug libelf/23528] New: When executing ./eu-nm or ./eu-readelf -aAdehIlnrsSVcp -w, AddressSanitizer chatch a double-free crashes.

["wcventure at 126 dot com" <sourceware-bugzilla@sourceware.org>]

https://sourceware.org/bugzilla/show_bug.cgi?id=23528

            Bug ID: 23528
           Summary: When executing ./eu-nm or ./eu-readelf -aAdehIlnrsSVcp
                    -w, AddressSanitizer chatch a double-free crashes.
           Product: elfutils
           Version: unspecified
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: libelf
          Assignee: unassigned at sourceware dot org
          Reporter: wcventure at 126 dot com
                CC: elfutils-devel at sourceware dot org
  Target Milestone: ---

Created attachment 11185
  --> https://sourceware.org/bugzilla/attachment.cgi?id=11185&action=edit
When executing ./eu-nm or ./eu-readelf -aAdehIlnrsSVcp -w, AddressSanitizer
chatch a double-free crashes.

When executing ./eu-nm @@ or ./eu-readelf -aAdehIlnrsSVcp -w @@,
AddressSanitizer chatch a double-free crashes.

The AddressSanitizer's output shows as follow:
==30316==ERROR: AddressSanitizer: attempting double-free on 0x60400000de50 in
thread T0:
    #0 0x7ffffe5282ca in __interceptor_free
(/usr/lib/x86_64-linux-gnu/libasan.so.2+0x982ca)
    #1 0x7ffffde26c83 in elf_end /mnt/d/Project/elfutils/libelf/elf_end.c:171
    #2 0x7ffffe1b23f6 in free_file
/mnt/d/Project/elfutils/libdwfl/dwfl_module.c:57
    #3 0x7ffffe1b23f6 in __libdwfl_module_free
/mnt/d/Project/elfutils/libdwfl/dwfl_module.c:113
    #4 0x7ffffe1b06bc in dwfl_end /mnt/d/Project/elfutils/libdwfl/dwfl_end.c:54
    #5 0x409883 in show_symbols /mnt/d/Project/elfutils/src/nm.c:1494
    #6 0x40cf4c in handle_elf /mnt/d/Project/elfutils/src/nm.c:1578
    #7 0x4035dc in process_file /mnt/d/Project/elfutils/src/nm.c:374
    #8 0x4035dc in main /mnt/d/Project/elfutils/src/nm.c:249
    #9 0x7ffffd4c082f in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #10 0x4043c8 in _start (/mnt/d/Project/elfutils/build/bin/eu-nm+0x4043c8)

0x60400000de50 is located 0 bytes inside of 36-byte region
[0x60400000de50,0x60400000de74)
freed by thread T0 here:
    #0 0x7ffffe5282ca in __interceptor_free
(/usr/lib/x86_64-linux-gnu/libasan.so.2+0x982ca)
    #1 0x7ffffdea3dcf in __libelf_reset_rawdata
/mnt/d/Project/elfutils/libelf/elf_compress.c:325

previously allocated by thread T0 here:
    #0 0x7ffffe528602 in malloc
(/usr/lib/x86_64-linux-gnu/libasan.so.2+0x98602)
    #1 0x7ffffdea31dd in __libelf_decompress
/mnt/d/Project/elfutils/libelf/elf_compress.c:223
    #2 0x7ffffdeaa490  (/mnt/d/Project/elfutils/build/lib/libelf.so.1+0x9a490)

SUMMARY: AddressSanitizer: double-free ??:0 __interceptor_free
==30316==ABORTING
[Inferior 1 (process 30316) exited with code 01]

-- 
You are receiving this mail because:
You are on the CC list for the bug.