[Bug binutils/26348] New: Malloc size error in strip-new

[seviezhou at 163 dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26348

            Bug ID: 26348
           Summary: Malloc size error in strip-new
           Product: binutils
           Version: 2.36 (HEAD)
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: binutils
          Assignee: unassigned at sourceware dot org
          Reporter: seviezhou at 163 dot com
  Target Milestone: ---

Created attachment 12753
  --> https://sourceware.org/bugzilla/attachment.cgi?id=12753&action=edit
malloc-size-error-write_zeros-elf-5406

I found a malloc size error in strip-new, source line is elf.c:5406:9, here is
the detail:

## System info

Ubuntu x86_64, gcc (Ubuntu 5.5.0-12ubuntu1), binutils (2.36
8c4c18181ea382adf407df235c7991feb0647bab)

## Configure

CFLAGS="-g -fsanitize=address" LDFLAGS="-fsanitize=address" ./configure

## Command line

./binutils/strip-new -s -g -S -d -w -x -X -v -o /dev/null
./malloc-size-error-write_zeros-elf-5406

## AddressSanitizer output

```
==37618==WARNING: AddressSanitizer failed to allocate 0x2fffffffffff770 bytes
==37618==AddressSanitizer's allocator is terminating the process instead of
returning 0
==37618==If you don't like this behavior set allocator_may_return_null=1
==37618==AddressSanitizer CHECK failed:
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
"((0)) != (0)" (0x0, 0x0)
    #0 0x4e841f in __asan::AsanCheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/asan/asan_rtl.cc:69
    #1 0x505395 in __sanitizer::CheckFailed(char const*, int, char const*,
unsigned long long, unsigned long long)
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_termination.cc:79
    #2 0x4ee246 in __sanitizer::ReportAllocatorCannotReturnNull()
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
    #3 0x4ee283 in __sanitizer::ReturnNullOrDieOnFailure::OnBadRequest()
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:241
    #4 0x41f356 in __asan::asan_malloc(unsigned long,
__sanitizer::BufferedStackTrace*)
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/asan/asan_allocator.cc:856
    #5 0x4def04 in malloc
/home/seviezhou/llvm-6.0.0/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:89
    #6 0x59167a in bfd_malloc /home/seviezhou/binutils/bfd/libbfd.c:275:9
    #7 0x591980 in bfd_zmalloc /home/seviezhou/binutils/bfd/libbfd.c:326:15
    #8 0x669bcf in write_zeros /home/seviezhou/binutils/bfd/elf.c:5406:9
    #9 0x669bcf in assign_file_positions_for_load_sections
/home/seviezhou/binutils/bfd/elf.c:5831
    #10 0x63bcd5 in assign_file_positions_except_relocs
/home/seviezhou/binutils/bfd/elf.c:6388:12
    #11 0x63bcd5 in _bfd_elf_compute_section_file_positions
/home/seviezhou/binutils/bfd/elf.c:4336
    #12 0x658cd6 in _bfd_elf_set_section_contents
/home/seviezhou/binutils/bfd/elf.c:9276:12
    #13 0x59fd29 in bfd_set_section_contents
/home/seviezhou/binutils/bfd/section.c:1520:7
    #14 0x528fc8 in copy_section
/home/seviezhou/binutils/binutils/objcopy.c:4430:12
    #15 0x59f6dc in bfd_map_over_sections
/home/seviezhou/binutils/bfd/section.c:1379:5
    #16 0x525bb5 in copy_object
/home/seviezhou/binutils/binutils/objcopy.c:3266:3
    #17 0x51eeea in copy_file
/home/seviezhou/binutils/binutils/objcopy.c:3831:13
    #18 0x5177d9 in strip_main
/home/seviezhou/binutils/binutils/objcopy.c:4818:7
    #19 0x5177d9 in main /home/seviezhou/binutils/binutils/objcopy.c:6016
    #20 0x7f9cfcd9f83f in __libc_start_main
/build/glibc-e6zv40/glibc-2.23/csu/../csu/libc-start.c:291
    #21 0x41ad18 in _start
(/home/seviezhou/experiment-5/AlphaFuzz-strip/test/strip-new+0x41ad18)

```

-- 
You are receiving this mail because:
You are on the CC list for the bug.