* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
@ 2021-12-20 0:44 ` mark at klomp dot org
2021-12-20 2:40 ` evvers at ya dot ru
` (7 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: mark at klomp dot org @ 2021-12-20 0:44 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
Mark Wielaard <mark at klomp dot org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|unassigned at sourceware dot org |mark at klomp dot org
Status|UNCONFIRMED |ASSIGNED
Last reconfirmed| |2021-12-20
Ever confirmed|0 |1
CC| |mark at klomp dot org
--- Comment #1 from Mark Wielaard <mark at klomp dot org> ---
I couldn't replicate the infinite loop, which I assume has been fixed by:
https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
But I saw it did trigger yet another xlate alignment issue for which I did
submit:
https://sourceware.org/pipermail/elfutils-devel/2021q4/004565.html
P.S. Note that the bugs.chromium.org link doesn't work for me, it apparently
requires a google account with permissions to even just look at that bug.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
2021-12-20 0:44 ` [Bug libdw/28715] " mark at klomp dot org
@ 2021-12-20 2:40 ` evvers at ya dot ru
2021-12-20 11:41 ` evvers at ya dot ru
` (6 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: evvers at ya dot ru @ 2021-12-20 2:40 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #2 from Evgeny Vereshchagin <evvers at ya dot ru> ---
(In reply to Mark Wielaard from comment #1)
> I couldn't replicate the infinite loop, which I assume has been fixed by:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
>
> But I saw it did trigger yet another xlate alignment issue for which I did
> submit:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004565.html
Thanks! I'll try to take a look tomorrow.
There seem to be quite a few new patches on the mailing list. I wonder if it's
possible to somehow fetch a branch with all of them so that I could just rebase
the fuzzing infrastructure on top of it?
> P.S. Note that the bugs.chromium.org link doesn't work for me, it apparently
> requires a google account with permissions to even just look at that bug.
It's possible to make all the bug reports public by default. For example, in
https://github.com/google/oss-fuzz/pull/6741 the PHP project decided that bug
reports should be no longer restricted and flipped the flag. I can do the same
but I don't think I can do it without your approval.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
2021-12-20 0:44 ` [Bug libdw/28715] " mark at klomp dot org
2021-12-20 2:40 ` evvers at ya dot ru
@ 2021-12-20 11:41 ` evvers at ya dot ru
2021-12-20 15:39 ` evvers at ya dot ru
` (5 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: evvers at ya dot ru @ 2021-12-20 11:41 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #3 from Evgeny Vereshchagin <evvers at ya dot ru> ---
(In reply to Mark Wielaard from comment #1)
> I couldn't replicate the infinite loop, which I assume has been fixed by:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
I haven't backported that patch yet but as far as I can see the infinite loop
can't be triggered with the following patches applied:
```
afd19a71 libdwfl: Handle unaligned Phdr in dwfl_segment_report_module
cf41ae95 libdwfl: Handle unaligned Ehdr in dwfl_segment_report_module
7f5e5da8 libdwfl: Make sure note data is properly aligned.
```
> But I saw it did trigger yet another xlate alignment issue for which I did
> submit:
> https://sourceware.org/pipermail/elfutils-devel/2021q4/004565.html
I've just ran into that as well. I'll apply the patch and report back if it's
still there.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (2 preceding siblings ...)
2021-12-20 11:41 ` evvers at ya dot ru
@ 2021-12-20 15:39 ` evvers at ya dot ru
2021-12-20 15:47 ` evvers at ya dot ru
` (4 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: evvers at ya dot ru @ 2021-12-20 15:39 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #4 from Evgeny Vereshchagin <evvers at ya dot ru> ---
(In reply to Evgeny Vereshchagin from comment #3)
> (In reply to Mark Wielaard from comment #1)
> > I couldn't replicate the infinite loop, which I assume has been fixed by:
> > https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html
>
> I haven't backported that patch yet but as far as I can see the infinite
> loop can't be triggered with the following patches applied:
> ```
> afd19a71 libdwfl: Handle unaligned Phdr in dwfl_segment_report_module
> cf41ae95 libdwfl: Handle unaligned Ehdr in dwfl_segment_report_module
> 7f5e5da8 libdwfl: Make sure note data is properly aligned.
> ```
Looks like I was wrong. Packit along with run-fuzz-dwfl-core.sh actually caught
the infinite loop on 32 bit platforms:
```
Running:
/builddir/build/BUILD/elfutils-0.186/tests/fuzz-dwfl-core-crashes/oss-fuzz-42645
./test-subr.sh: line 84: 20115 Killed
LD_LIBRARY_PATH="${built_library_path}${LD_LIBRARY_PATH:+:}$LD_LIBRARY_PATH"
$VALGRIND_CMD "$@"
```
I just didn't wait for it to finish.
I'll try to apply
https://sourceware.org/pipermail/elfutils-devel/2021q4/004557.html shortly and
report back.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (3 preceding siblings ...)
2021-12-20 15:39 ` evvers at ya dot ru
@ 2021-12-20 15:47 ` evvers at ya dot ru
2021-12-20 17:25 ` mark at klomp dot org
` (3 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: evvers at ya dot ru @ 2021-12-20 15:47 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #5 from Evgeny Vereshchagin <evvers at ya dot ru> ---
I can't seem to apply that patch:
```
$ git am --exclude=libdwfl/ChangeLog p4.patch
Applying: libdwfl: Rewrite GElf_Nhdr reading in dwfl_segment_report_module
error: patch failed: libdwfl/dwfl_segment_report_module.c:552
error: libdwfl/dwfl_segment_report_module.c: patch does not apply
Patch failed at 0001 libdwfl: Rewrite GElf_Nhdr reading in
dwfl_segment_report_module
```
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (4 preceding siblings ...)
2021-12-20 15:47 ` evvers at ya dot ru
@ 2021-12-20 17:25 ` mark at klomp dot org
2021-12-20 17:38 ` mark at klomp dot org
` (2 subsequent siblings)
8 siblings, 0 replies; 10+ messages in thread
From: mark at klomp dot org @ 2021-12-20 17:25 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #6 from Mark Wielaard <mark at klomp dot org> ---
(In reply to Evgeny Vereshchagin from comment #5)
> I can't seem to apply that patch:
It might be easier to pick up the whole "fuzz" branch from my tree:
https://code.wildebeest.org/git/user/mjw/elfutils/log/?h=fuzz
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (5 preceding siblings ...)
2021-12-20 17:25 ` mark at klomp dot org
@ 2021-12-20 17:38 ` mark at klomp dot org
2021-12-20 20:58 ` evvers at ya dot ru
2021-12-21 11:17 ` mark at klomp dot org
8 siblings, 0 replies; 10+ messages in thread
From: mark at klomp dot org @ 2021-12-20 17:38 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #7 from Mark Wielaard <mark at klomp dot org> ---
(In reply to Evgeny Vereshchagin from comment #2)
> There seem to be quite a few new patches on the mailing list. I wonder if
> it's possible to somehow fetch a branch with all of them so that I could
> just rebase the fuzzing infrastructure on top of it?
All patches sent to the list are also in patchwork:
https://patchwork.sourceware.org/project/elfutils/list/
I keep work in progress also in branch in my own git tree:
https://code.wildebeest.org/git/user/mjw/elfutils/
The fuzz branch has all recent patches based on your fuzzing reports and my own
finds running afl and afl++ on amd64 and i686 for eu-stack --core
> > P.S. Note that the bugs.chromium.org link doesn't work for me, it apparently
> > requires a google account with permissions to even just look at that bug.
>
> It's possible to make all the bug reports public by default. For example, in
> https://github.com/google/oss-fuzz/pull/6741 the PHP project decided that
> bug reports should be no longer restricted and flipped the flag. I can do
> the same but I don't think I can do it without your approval.
I think it is better if the reports were public. But I think google really
should just report these issues upstream instead of hiding them in their own
bug tracker.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (6 preceding siblings ...)
2021-12-20 17:38 ` mark at klomp dot org
@ 2021-12-20 20:58 ` evvers at ya dot ru
2021-12-21 11:17 ` mark at klomp dot org
8 siblings, 0 replies; 10+ messages in thread
From: evvers at ya dot ru @ 2021-12-20 20:58 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
--- Comment #8 from Evgeny Vereshchagin <evvers at ya dot ru> ---
(In reply to Mark Wielaard from comment #7)
> (In reply to Evgeny Vereshchagin from comment #2)
> > There seem to be quite a few new patches on the mailing list. I wonder if
> > it's possible to somehow fetch a branch with all of them so that I could
> > just rebase the fuzzing infrastructure on top of it?
>
> All patches sent to the list are also in patchwork:
> https://patchwork.sourceware.org/project/elfutils/list/
>
> I keep work in progress also in branch in my own git tree:
> https://code.wildebeest.org/git/user/mjw/elfutils/
>
> The fuzz branch has all recent patches based on your fuzzing reports and my
> own finds running afl and afl++ on amd64 and i686 for eu-stack --core
>
With https://code.wildebeest.org/git/user/mjw/elfutils/log/?h=fuzz rebased on
top of my "fuzzing" branch I can no longer reproduce this issue. Thanks!
> I think it is better if the reports were public.
Got it. I'll flip the flag there then. Would it be OK if I added your email
address to
https://github.com/google/oss-fuzz/blob/master/projects/elfutils/project.yaml
so that you could be notified when new bug reports were opened?
> But I think google really
> should just report these issues upstream instead of hiding them in their own
> bug tracker.
Unfortunately I can't change that (and I'm not affiliated with Google in any
way). I tried to use my main email address there but at some point I had to
create a gmail account to be able to look at systemd bug reports.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Bug libdw/28715] There seems to be an infinite loop in dwfl_segment_report_module
2021-12-19 20:41 [Bug libdw/28715] New: There seems to be an infinite loop in dwfl_segment_report_module evvers at ya dot ru
` (7 preceding siblings ...)
2021-12-20 20:58 ` evvers at ya dot ru
@ 2021-12-21 11:17 ` mark at klomp dot org
8 siblings, 0 replies; 10+ messages in thread
From: mark at klomp dot org @ 2021-12-21 11:17 UTC (permalink / raw)
To: elfutils-devel
https://sourceware.org/bugzilla/show_bug.cgi?id=28715
Mark Wielaard <mark at klomp dot org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution|--- |FIXED
--- Comment #9 from Mark Wielaard <mark at klomp dot org> ---
(In reply to Evgeny Vereshchagin from comment #8)
> (In reply to Mark Wielaard from comment #7)
> > (In reply to Evgeny Vereshchagin from comment #2)
> > > There seem to be quite a few new patches on the mailing list. I wonder if
> > > it's possible to somehow fetch a branch with all of them so that I could
> > > just rebase the fuzzing infrastructure on top of it?
> >
> > All patches sent to the list are also in patchwork:
> > https://patchwork.sourceware.org/project/elfutils/list/
> >
> > I keep work in progress also in branch in my own git tree:
> > https://code.wildebeest.org/git/user/mjw/elfutils/
> >
> > The fuzz branch has all recent patches based on your fuzzing reports and my
> > own finds running afl and afl++ on amd64 and i686 for eu-stack --core
> >
>
> With https://code.wildebeest.org/git/user/mjw/elfutils/log/?h=fuzz rebased
> on top of my "fuzzing" branch I can no longer reproduce this issue. Thanks!
Thanks for testing, I pushed all 13 commits from my fuzz branch.
> > I think it is better if the reports were public.
>
> Got it. I'll flip the flag there then. Would it be OK if I added your email
> address to
> https://github.com/google/oss-fuzz/blob/master/projects/elfutils/project.
> yaml so that you could be notified when new bug reports were opened?
Sure, or just add elfutils-devel@sourceware.org so everybody gets the reports.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 10+ messages in thread