From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sourceware-bugzilla@sourceware.org>
Received: by sourceware.org (Postfix, from userid 48)
 id 9DCBD3858C27; Thu,  9 Dec 2021 21:20:21 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 9DCBD3858C27
From: "evvers at ya dot ru" <sourceware-bugzilla@sourceware.org>
To: elfutils-devel@sourceware.org
Subject: [Bug libdw/28660] ASan seems to complain about a
 "heap-buffer-overflow"
Date: Thu, 09 Dec 2021 21:20:21 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: elfutils
X-Bugzilla-Component: libdw
X-Bugzilla-Version: unspecified
X-Bugzilla-Keywords: 
X-Bugzilla-Severity: normal
X-Bugzilla-Who: evvers at ya dot ru
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: P2
X-Bugzilla-Assigned-To: unassigned at sourceware dot org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: attachments.created
Message-ID: <bug-28660-10460-qvuoQ8C9DR@http.sourceware.org/bugzilla/>
In-Reply-To: <bug-28660-10460@http.sourceware.org/bugzilla/>
References: <bug-28660-10460@http.sourceware.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://sourceware.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-BeenThere: elfutils-devel@sourceware.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Elfutils-devel mailing list <elfutils-devel.sourceware.org>
List-Unsubscribe: <https://sourceware.org/mailman/options/elfutils-devel>,
 <mailto:elfutils-devel-request@sourceware.org?subject=unsubscribe>
List-Archive: <https://sourceware.org/pipermail/elfutils-devel/>
List-Help: <mailto:elfutils-devel-request@sourceware.org?subject=help>
List-Subscribe: <https://sourceware.org/mailman/listinfo/elfutils-devel>,
 <mailto:elfutils-devel-request@sourceware.org?subject=subscribe>
X-List-Received-Date: Thu, 09 Dec 2021 21:20:21 -0000

https://sourceware.org/bugzilla/show_bug.cgi?id=3D28660

--- Comment #4 from Evgeny Vereshchagin <evvers at ya dot ru> ---
Created attachment 13842
  --> https://sourceware.org/bugzilla/attachment.cgi?id=3D13842&action=3Ded=
it
File triggering an "invalid read"

I've just attached a file triggering the issue:

```
autoreconf -i -f
./configure --enable-maintainer-mode
make -j$(nproc) V=3D1
DEBUGINFOD_URLS=3D LD_PRELOAD=3D"./libelf/libelf.so ./libdw/libdw.so" valgr=
ind
--leak-check=3Dfull ./src/stack --core
../crash-e8e47de6a28b1be30e3a7e2f92b7c9e4f4fffa9d
=3D=3D87229=3D=3D Memcheck, a memory error detector
=3D=3D87229=3D=3D Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward =
et al.
=3D=3D87229=3D=3D Using Valgrind-3.18.1 and LibVEX; rerun with -h for copyr=
ight info
=3D=3D87229=3D=3D Command: ./src/stack --core
../crash-e8e47de6a28b1be30e3a7e2f92b7c9e4f4fffa9d
=3D=3D87229=3D=3D
=3D=3D87229=3D=3D Invalid read of size 4
=3D=3D87229=3D=3D    at 0x48C783F: dwfl_link_map_report (link_map.c:917)
=3D=3D87229=3D=3D    by 0x48C8DC5: dwfl_core_file_report@@ELFUTILS_0.158
(core-file.c:548)
=3D=3D87229=3D=3D    by 0x402EC6: parse_opt (stack.c:595)
=3D=3D87229=3D=3D    by 0x4C4D591: argp_parse (in /usr/lib64/libc.so.6)
=3D=3D87229=3D=3D    by 0x4024EA: main (stack.c:695)
=3D=3D87229=3D=3D  Address 0x5029ae0 is 0 bytes after a block of size 4,096=
 alloc'd
=3D=3D87229=3D=3D    at 0x484186F: malloc (vg_replace_malloc.c:381)
=3D=3D87229=3D=3D    by 0x48C7D6B: dwfl_link_map_report (link_map.c:891)
=3D=3D87229=3D=3D    by 0x48C8DC5: dwfl_core_file_report@@ELFUTILS_0.158
(core-file.c:548)
=3D=3D87229=3D=3D    by 0x402EC6: parse_opt (stack.c:595)
=3D=3D87229=3D=3D    by 0x4C4D591: argp_parse (in /usr/lib64/libc.so.6)
=3D=3D87229=3D=3D    by 0x4024EA: main (stack.c:695)
```

--=20
You are receiving this mail because:
You are on the CC list for the bug.=