stack-overflow on GNU libiberty/rust-demangle.c:664 demangle_path

[chengxianglin]

stack-overflowon GNU libiberty/rust-demangle.c:664 demangle_path when we run ./cxxfilt ./crashs/poc

./crash/poc:�@}����@�^_RB_RB999IRB�RB9999RB

==34504==ERROR: AddressSanitizer: stack-overflow on address 0x7ffee6038f48 (pc 0x0000006a3331 bp 0x7ffee6039060 sp 0x7ffee6038f20 T0)
    #0 0x6a3330 in demangle_path rust-demangle.c:664
    #1 0x6a3bd1 in demangle_path rust-demangle.c:774
    #2 0x6a3bd1 in demangle_path rust-demangle.c:774
    #3 0x6a3bd1 in demangle_path rust-demangle.c:774
    #4 0x6a3bd1 in demangle_path rust-demangle.c:774
    #5 0x6a3bd1 in demangle_path rust-demangle.c:774
    #6 0x6a3bd1 in demangle_path rust-demangle.c:774
    #7 0x6a3bd1 in demangle_path rust-demangle.c:774
    #8 0x6a3bd1 in demangle_path rust-demangle.c:774
    #9 0x6a3bd1 in demangle_path rust-demangle.c:774
    #10 0x6a3bd1 in demangle_path rust-demangle.c:774
    #11 0x6a3bd1 in demangle_path rust-demangle.c:774
    #12 0x6a3bd1 in demangle_path rust-demangle.c:774
    #13 0x6a3bd1 in demangle_path rust-demangle.c:774
    #14 0x6a3bd1 in demangle_path rust-demangle.c:774
    #15 0x6a3bd1 in demangle_path rust-demangle.c:774
    #16 0x6a3bd1 in demangle_path rust-demangle.c:774
    #17 0x6a3bd1 in demangle_path rust-demangle.c:774
    #18 0x6a3bd1 in demangle_path rust-demangle.c:774
    #19 0x6a3bd1 in demangle_path rust-demangle.c:774
    #20 0x6a3bd1 in demangle_path rust-demangle.c:774
    #21 0x6a3bd1 in demangle_path rust-demangle.c:774
    #22 0x6a3bd1 in demangle_path rust-demangle.c:774
    #23 0x6a3bd1 in demangle_path rust-demangle.c:774
    #24 0x6a3bd1 in demangle_path rust-demangle.c:774
    #25 0x6a3bd1 in demangle_path rust-demangle.c:774
    #26 0x6a3bd1 in demangle_path rust-demangle.c:774
    #27 0x6a3bd1 in demangle_path rust-demangle.c:774
    #28 0x6a3bd1 in demangle_path rust-demangle.c:774
    #29 0x6a3bd1 in demangle_path rust-demangle.c:774
    #30 0x6a3bd1 in demangle_path rust-demangle.c:774
    #31 0x6a3bd1 in demangle_path rust-demangle.c:774
    #32 0x6a3bd1 in demangle_path rust-demangle.c:774
    #33 0x6a3bd1 in demangle_path rust-demangle.c:774
    #34 0x6a3bd1 in demangle_path rust-demangle.c:774
    #35 0x6a3bd1 in demangle_path rust-demangle.c:774
    #36 0x6a3bd1 in demangle_path rust-demangle.c:774
    #37 0x6a3bd1 in demangle_path rust-demangle.c:774
    #38 0x6a3bd1 in demangle_path rust-demangle.c:774
    #39 0x6a3bd1 in demangle_path rust-demangle.c:774
    #40 0x6a3bd1 in demangle_path rust-demangle.c:774
    #41 0x6a3bd1 in demangle_path rust-demangle.c:774
    #42 0x6a3bd1 in demangle_path rust-demangle.c:774
    #43 0x6a3bd1 in demangle_path rust-demangle.c:774
    #44 0x6a3bd1 in demangle_path rust-demangle.c:774
    #45 0x6a3bd1 in demangle_path rust-demangle.c:774
    #46 0x6a3bd1 in demangle_path rust-demangle.c:774
    #47 0x6a3bd1 in demangle_path rust-demangle.c:774
    #48 0x6a3bd1 in demangle_path rust-demangle.c:774
    #49 0x6a3bd1 in demangle_path rust-demangle.c:774
    #50 0x6a3bd1 in demangle_path rust-demangle.c:774
    #51 0x6a3bd1 in demangle_path rust-demangle.c:774
    #52 0x6a3bd1 in demangle_path rust-demangle.c:774
    #53 0x6a3bd1 in demangle_path rust-demangle.c:774
    #54 0x6a3bd1 in demangle_path rust-demangle.c:774
    #55 0x6a3bd1 in demangle_path rust-demangle.c:774
    #56 0x6a3bd1 in demangle_path rust-demangle.c:774
    #57 0x6a3bd1 in demangle_path rust-demangle.c:774
    #58 0x6a3bd1 in demangle_path rust-demangle.c:774
    #59 0x6a3bd1 in demangle_path rust-demangle.c:774
    #60 0x6a3bd1 in demangle_path rust-demangle.c:774
    #61 0x6a3bd1 in demangle_path rust-demangle.c:774
    #62 0x6a3bd1 in demangle_path rust-demangle.c:774
    #63 0x6a3bd1 in demangle_path rust-demangle.c:774
    #64 0x6a3bd1 in demangle_path rust-demangle.c:774
    #65 0x6a3bd1 in demangle_path rust-demangle.c:774
    #66 0x6a3bd1 in demangle_path rust-demangle.c:774
    #67 0x6a3bd1 in demangle_path rust-demangle.c:774
    #68 0x6a3bd1 in demangle_path rust-demangle.c:774
    #69 0x6a3bd1 in demangle_path rust-demangle.c:774
    #70 0x6a3bd1 in demangle_path rust-demangle.c:774
    #71 0x6a3bd1 in demangle_path rust-demangle.c:774
    #72 0x6a3bd1 in demangle_path rust-demangle.c:774
    #73 0x6a3bd1 in demangle_path rust-demangle.c:774
    #74 0x6a3bd1 in demangle_path rust-demangle.c:774
    #75 0x6a3bd1 in demangle_path rust-demangle.c:774
    #76 0x6a3bd1 in demangle_path rust-demangle.c:774
    #77 0x6a3bd1 in demangle_path rust-demangle.c:774
    #78 0x6a3bd1 in demangle_path rust-demangle.c:774
    #79 0x6a3bd1 in demangle_path rust-demangle.c:774
    #80 0x6a3bd1 in demangle_path rust-demangle.c:774
    #81 0x6a3bd1 in demangle_path rust-demangle.c:774
    #82 0x6a3bd1 in demangle_path rust-demangle.c:774
    #83 0x6a3bd1 in demangle_path rust-demangle.c:774
    #84 0x6a3bd1 in demangle_path rust-demangle.c:774
    #85 0x6a3bd1 in demangle_path rust-demangle.c:774
    #86 0x6a3bd1 in demangle_path rust-demangle.c:774
    #87 0x6a3bd1 in demangle_path rust-demangle.c:774
    #88 0x6a3bd1 in demangle_path rust-demangle.c:774
    #89 0x6a3bd1 in demangle_path rust-demangle.c:774
    #90 0x6a3bd1 in demangle_path rust-demangle.c:774
    #91 0x6a3bd1 in demangle_path rust-demangle.c:774
    #92 0x6a3bd1 in demangle_path rust-demangle.c:774
    #93 0x6a3bd1 in demangle_path rust-demangle.c:774
    #94 0x6a3bd1 in demangle_path rust-demangle.c:774
    #95 0x6a3bd1 in demangle_path rust-demangle.c:774
    #96 0x6a3bd1 in demangle_path rust-demangle.c:774
    #97 0x6a3bd1 in demangle_path rust-demangle.c:774
    #98 0x6a3bd1 in demangle_path rust-demangle.c:774
    #99 0x6a3bd1 in demangle_path rust-demangle.c:774
    #100 0x6a3bd1 in demangle_path rust-demangle.c:774
    #101 0x6a3bd1 in demangle_path rust-demangle.c:774
    #102 0x6a3bd1 in demangle_path rust-demangle.c:774
    #103 0x6a3bd1 in demangle_path rust-demangle.c:774
    #104 0x6a3bd1 in demangle_path rust-demangle.c:774
    #105 0x6a3bd1 in demangle_path rust-demangle.c:774
    #106 0x6a3bd1 in demangle_path rust-demangle.c:774
    #107 0x6a3bd1 in demangle_path rust-demangle.c:774
    #108 0x6a3bd1 in demangle_path rust-demangle.c:774
    #109 0x6a3bd1 in demangle_path rust-demangle.c:774
    #110 0x6a3bd1 in demangle_path rust-demangle.c:774
    #111 0x6a3bd1 in demangle_path rust-demangle.c:774
    #112 0x6a3bd1 in demangle_path rust-demangle.c:774
    #113 0x6a3bd1 in demangle_path rust-demangle.c:774
    #114 0x6a3bd1 in demangle_path rust-demangle.c:774
    #115 0x6a3bd1 in demangle_path rust-demangle.c:774
    #116 0x6a3bd1 in demangle_path rust-demangle.c:774
    #117 0x6a3bd1 in demangle_path rust-demangle.c:774
    #118 0x6a3bd1 in demangle_path rust-demangle.c:774
    #119 0x6a3bd1 in demangle_path rust-demangle.c:774
    #120 0x6a3bd1 in demangle_path rust-demangle.c:774
    #121 0x6a3bd1 in demangle_path rust-demangle.c:774
    #122 0x6a3bd1 in demangle_path rust-demangle.c:774
    #123 0x6a3bd1 in demangle_path rust-demangle.c:774
    #124 0x6a3bd1 in demangle_path rust-demangle.c:774
    #125 0x6a3bd1 in demangle_path rust-demangle.c:774
    #126 0x6a3bd1 in demangle_path rust-demangle.c:774
    #127 0x6a3bd1 in demangle_path rust-demangle.c:774
    #128 0x6a3bd1 in demangle_path rust-demangle.c:774
    #129 0x6a3bd1 in demangle_path rust-demangle.c:774
    #130 0x6a3bd1 in demangle_path rust-demangle.c:774
    #131 0x6a3bd1 in demangle_path rust-demangle.c:774
    #132 0x6a3bd1 in demangle_path rust-demangle.c:774
    #133 0x6a3bd1 in demangle_path rust-demangle.c:774
    #134 0x6a3bd1 in demangle_path rust-demangle.c:774
    #135 0x6a3bd1 in demangle_path rust-demangle.c:774
    #136 0x6a3bd1 in demangle_path rust-demangle.c:774
    #137 0x6a3bd1 in demangle_path rust-demangle.c:774
    #138 0x6a3bd1 in demangle_path rust-demangle.c:774
    #139 0x6a3bd1 in demangle_path rust-demangle.c:774
    #140 0x6a3bd1 in demangle_path rust-demangle.c:774
    #141 0x6a3bd1 in demangle_path rust-demangle.c:774
    #142 0x6a3bd1 in demangle_path rust-demangle.c:774
    #143 0x6a3bd1 in demangle_path rust-demangle.c:774
    #144 0x6a3bd1 in demangle_path rust-demangle.c:774
    #145 0x6a3bd1 in demangle_path rust-demangle.c:774
    #146 0x6a3bd1 in demangle_path rust-demangle.c:774
    #147 0x6a3bd1 in demangle_path rust-demangle.c:774
    #148 0x6a3bd1 in demangle_path rust-demangle.c:774
    #149 0x6a3bd1 in demangle_path rust-demangle.c:774
    #150 0x6a3bd1 in demangle_path rust-demangle.c:774
    #151 0x6a3bd1 in demangle_path rust-demangle.c:774
    #152 0x6a3bd1 in demangle_path rust-demangle.c:774
    #153 0x6a3bd1 in demangle_path rust-demangle.c:774
    #154 0x6a3bd1 in demangle_path rust-demangle.c:774
    #155 0x6a3bd1 in demangle_path rust-demangle.c:774
    #156 0x6a3bd1 in demangle_path rust-demangle.c:774
    #157 0x6a3bd1 in demangle_path rust-demangle.c:774
    #158 0x6a3bd1 in demangle_path rust-demangle.c:774
    #159 0x6a3bd1 in demangle_path rust-demangle.c:774
    #160 0x6a3bd1 in demangle_path rust-demangle.c:774
    #161 0x6a3bd1 in demangle_path rust-demangle.c:774
    #162 0x6a3bd1 in demangle_path rust-demangle.c:774
    #163 0x6a3bd1 in demangle_path rust-demangle.c:774
    #164 0x6a3bd1 in demangle_path rust-demangle.c:774
    #165 0x6a3bd1 in demangle_path rust-demangle.c:774
    #166 0x6a3bd1 in demangle_path rust-demangle.c:774
    #167 0x6a3bd1 in demangle_path rust-demangle.c:774
    #168 0x6a3bd1 in demangle_path rust-demangle.c:774
    #169 0x6a3bd1 in demangle_path rust-demangle.c:774
    #170 0x6a3bd1 in demangle_path rust-demangle.c:774
    #171 0x6a3bd1 in demangle_path rust-demangle.c:774
    #172 0x6a3bd1 in demangle_path rust-demangle.c:774
    #173 0x6a3bd1 in demangle_path rust-demangle.c:774
    #174 0x6a3bd1 in demangle_path rust-demangle.c:774
    #175 0x6a3bd1 in demangle_path rust-demangle.c:774
    #176 0x6a3bd1 in demangle_path rust-demangle.c:774
    #177 0x6a3bd1 in demangle_path rust-demangle.c:774
    #178 0x6a3bd1 in demangle_path rust-demangle.c:774
    #179 0x6a3bd1 in demangle_path rust-demangle.c:774
    #180 0x6a3bd1 in demangle_path rust-demangle.c:774
    #181 0x6a3bd1 in demangle_path rust-demangle.c:774
    #182 0x6a3bd1 in demangle_path rust-demangle.c:774
    #183 0x6a3bd1 in demangle_path rust-demangle.c:774
    #184 0x6a3bd1 in demangle_path rust-demangle.c:774
    #185 0x6a3bd1 in demangle_path rust-demangle.c:774
    #186 0x6a3bd1 in demangle_path rust-demangle.c:774
    #187 0x6a3bd1 in demangle_path rust-demangle.c:774
    #188 0x6a3bd1 in demangle_path rust-demangle.c:774
    #189 0x6a3bd1 in demangle_path rust-demangle.c:774
    #190 0x6a3bd1 in demangle_path rust-demangle.c:774
    #191 0x6a3bd1 in demangle_path rust-demangle.c:774
    #192 0x6a3bd1 in demangle_path rust-demangle.c:774
    #193 0x6a3bd1 in demangle_path rust-demangle.c:774
    #194 0x6a3bd1 in demangle_path rust-demangle.c:774
    #195 0x6a3bd1 in demangle_path rust-demangle.c:774
    #196 0x6a3bd1 in demangle_path rust-demangle.c:774
    #197 0x6a3bd1 in demangle_path rust-demangle.c:774
    #198 0x6a3bd1 in demangle_path rust-demangle.c:774
    #199 0x6a3bd1 in demangle_path rust-demangle.c:774
    #200 0x6a3bd1 in demangle_path rust-demangle.c:774
    #201 0x6a3bd1 in demangle_path rust-demangle.c:774
    #202 0x6a3bd1 in demangle_path rust-demangle.c:774
    #203 0x6a3bd1 in demangle_path rust-demangle.c:774
    #204 0x6a3bd1 in demangle_path rust-demangle.c:774
    #205 0x6a3bd1 in demangle_path rust-demangle.c:774
    #206 0x6a3bd1 in demangle_path rust-demangle.c:774
    #207 0x6a3bd1 in demangle_path rust-demangle.c:774
    #208 0x6a3bd1 in demangle_path rust-demangle.c:774
    #209 0x6a3bd1 in demangle_path rust-demangle.c:774
    #210 0x6a3bd1 in demangle_path rust-demangle.c:774
    #211 0x6a3bd1 in demangle_path rust-demangle.c:774
    #212 0x6a3bd1 in demangle_path rust-demangle.c:774
    #213 0x6a3bd1 in demangle_path rust-demangle.c:774
    #214 0x6a3bd1 in demangle_path rust-demangle.c:774
    #215 0x6a3bd1 in demangle_path rust-demangle.c:774
    #216 0x6a3bd1 in demangle_path rust-demangle.c:774
    #217 0x6a3bd1 in demangle_path rust-demangle.c:774
    #218 0x6a3bd1 in demangle_path rust-demangle.c:774
    #219 0x6a3bd1 in demangle_path rust-demangle.c:774
    #220 0x6a3bd1 in demangle_path rust-demangle.c:774
    #221 0x6a3bd1 in demangle_path rust-demangle.c:774
    #222 0x6a3bd1 in demangle_path rust-demangle.c:774
    #223 0x6a3bd1 in demangle_path rust-demangle.c:774
    #224 0x6a3bd1 in demangle_path rust-demangle.c:774
    #225 0x6a3bd1 in demangle_path rust-demangle.c:774
    #226 0x6a3bd1 in demangle_path rust-demangle.c:774
    #227 0x6a3bd1 in demangle_path rust-demangle.c:774
    #228 0x6a3bd1 in demangle_path rust-demangle.c:774
    #229 0x6a3bd1 in demangle_path rust-demangle.c:774
    #230 0x6a3bd1 in demangle_path rust-demangle.c:774
    #231 0x6a3bd1 in demangle_path rust-demangle.c:774
    #232 0x6a3bd1 in demangle_path rust-demangle.c:774
    #233 0x6a3bd1 in demangle_path rust-demangle.c:774
    #234 0x6a3bd1 in demangle_path rust-demangle.c:774
    #235 0x6a3bd1 in demangle_path rust-demangle.c:774
    #236 0x6a3bd1 in demangle_path rust-demangle.c:774
    #237 0x6a3bd1 in demangle_path rust-demangle.c:774
    #238 0x6a3bd1 in demangle_path rust-demangle.c:774
    #239 0x6a3bd1 in demangle_path rust-demangle.c:774
    #240 0x6a3bd1 in demangle_path rust-demangle.c:774
    #241 0x6a3bd1 in demangle_path rust-demangle.c:774
    #242 0x6a3bd1 in demangle_path rust-demangle.c:774
    #243 0x6a3bd1 in demangle_path rust-demangle.c:774
    #244 0x6a3bd1 in demangle_path rust-demangle.c:774
    #245 0x6a3bd1 in demangle_path rust-demangle.c:774
    #246 0x6a3bd1 in demangle_path rust-demangle.c:774
    #247 0x6a3bd1 in demangle_path rust-demangle.c:774
    #248 0x6a3bd1 in demangle_path rust-demangle.c:774
    #249 0x6a3bd1 in demangle_path rust-demangle.c:774
    #250 0x6a3bd1 in demangle_path rust-demangle.c:774
    #251 0x6a3bd1 in demangle_path rust-demangle.c:774

SUMMARY: AddressSanitizer: stack-overflow rust-demangle.c:664 demangle_path

[Matthias Klose (doko)]

please don't submit issues like this without a reproducer.

[Jeffrey Hawkins (rtswguru)]

What is the status of this CVE with Ubuntu Jammy? This was fixed in the upstream in January/February 2022, https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99935#c11