Ubuntu
binutils package

stack-overflow on GNU libiberty/rust-demangle.c:1024 demangle_type

Bug #1927070 reported by chengxianglin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
binutils (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

stack-overflowon GNU libiberty/rust-demangle.c:84 peek when we run
cat /crashes/poc | ./cxxfilt
the version : binutils(2.36)
/crashes/poc:
F}��.]]��_RYFB1_��z^A^R]M�^?N�^K^]�J^@^@^@^@^@^@^@^@���������^A^@������]^yCo#Mo?NCgyCo7MoPggCo~NMG^P#��=^F~@c�Cqot�_ZooSk;^]���������������������������]^yCo7Mo?NCgyCo7MoPggCo~NMG^P#^R�7Cg^V^A_���^?^@^A�_ZooSoBbg6^@g^_�@gg��g����!T^[

asan output:
root@f960c0e3747a:cat /crashes/poc | ./cxxfilt
ASAN:SIGSEGV
=================================================================
==35495==ERROR: AddressSanitizer: stack-overflow on address 0x7ffcda322ff8 (pc 0x0000006a0e3f bp 0x7ffcda323000 sp 0x7ffcda322ff0 T0)
    #0 0x6a0e3e in peek rust-demangle.c:84
    #1 0x6a0f96 in next rust-demangle.c:105
    #2 0x6a478f in demangle_type rust-demangle.c:864
    #3 0x6a5110 in demangle_type rust-demangle.c:1024
    #4 0x6a5110 in demangle_type rust-demangle.c:1024
    #5 0x6a5110 in demangle_type rust-demangle.c:1024
    #6 0x6a5110 in demangle_type rust-demangle.c:1024
    #7 0x6a5110 in demangle_type rust-demangle.c:1024
    #8 0x6a5110 in demangle_type rust-demangle.c:1024
    #9 0x6a5110 in demangle_type rust-demangle.c:1024
    #10 0x6a5110 in demangle_type rust-demangle.c:1024
    #11 0x6a5110 in demangle_type rust-demangle.c:1024
    #12 0x6a5110 in demangle_type rust-demangle.c:1024
    #13 0x6a5110 in demangle_type rust-demangle.c:1024
    #14 0x6a5110 in demangle_type rust-demangle.c:1024
    #15 0x6a5110 in demangle_type rust-demangle.c:1024
    #16 0x6a5110 in demangle_type rust-demangle.c:1024
    #17 0x6a5110 in demangle_type rust-demangle.c:1024
    #18 0x6a5110 in demangle_type rust-demangle.c:1024
    #19 0x6a5110 in demangle_type rust-demangle.c:1024
    #20 0x6a5110 in demangle_type rust-demangle.c:1024
    #21 0x6a5110 in demangle_type rust-demangle.c:1024
    #22 0x6a5110 in demangle_type rust-demangle.c:1024
    #23 0x6a5110 in demangle_type rust-demangle.c:1024
    #24 0x6a5110 in demangle_type rust-demangle.c:1024
    #25 0x6a5110 in demangle_type rust-demangle.c:1024
    #26 0x6a5110 in demangle_type rust-demangle.c:1024
    #27 0x6a5110 in demangle_type rust-demangle.c:1024
    #28 0x6a5110 in demangle_type rust-demangle.c:1024
    #29 0x6a5110 in demangle_type rust-demangle.c:1024
    #30 0x6a5110 in demangle_type rust-demangle.c:1024
    #31 0x6a5110 in demangle_type rust-demangle.c:1024
    #32 0x6a5110 in demangle_type rust-demangle.c:1024
    #33 0x6a5110 in demangle_type rust-demangle.c:1024
    #34 0x6a5110 in demangle_type rust-demangle.c:1024
    #35 0x6a5110 in demangle_type rust-demangle.c:1024
    #36 0x6a5110 in demangle_type rust-demangle.c:1024
    #37 0x6a5110 in demangle_type rust-demangle.c:1024
    #38 0x6a5110 in demangle_type rust-demangle.c:1024
    #39 0x6a5110 in demangle_type rust-demangle.c:1024
    #40 0x6a5110 in demangle_type rust-demangle.c:1024
    #41 0x6a5110 in demangle_type rust-demangle.c:1024
    #42 0x6a5110 in demangle_type rust-demangle.c:1024
    #43 0x6a5110 in demangle_type rust-demangle.c:1024
    #44 0x6a5110 in demangle_type rust-demangle.c:1024
    #45 0x6a5110 in demangle_type rust-demangle.c:1024
    #46 0x6a5110 in demangle_type rust-demangle.c:1024
    #47 0x6a5110 in demangle_type rust-demangle.c:1024
    #48 0x6a5110 in demangle_type rust-demangle.c:1024
    #49 0x6a5110 in demangle_type rust-demangle.c:1024
    #50 0x6a5110 in demangle_type rust-demangle.c:1024
    #51 0x6a5110 in demangle_type rust-demangle.c:1024
    #52 0x6a5110 in demangle_type rust-demangle.c:1024
    #53 0x6a5110 in demangle_type rust-demangle.c:1024
    #54 0x6a5110 in demangle_type rust-demangle.c:1024
    #55 0x6a5110 in demangle_type rust-demangle.c:1024
    #56 0x6a5110 in demangle_type rust-demangle.c:1024
    #57 0x6a5110 in demangle_type rust-demangle.c:1024
    #58 0x6a5110 in demangle_type rust-demangle.c:1024
    #59 0x6a5110 in demangle_type rust-demangle.c:1024
    #60 0x6a5110 in demangle_type rust-demangle.c:1024
    #61 0x6a5110 in demangle_type rust-demangle.c:1024
    #62 0x6a5110 in demangle_type rust-demangle.c:1024
    #63 0x6a5110 in demangle_type rust-demangle.c:1024
    #64 0x6a5110 in demangle_type rust-demangle.c:1024
    #65 0x6a5110 in demangle_type rust-demangle.c:1024
    #66 0x6a5110 in demangle_type rust-demangle.c:1024
    #67 0x6a5110 in demangle_type rust-demangle.c:1024
    #68 0x6a5110 in demangle_type rust-demangle.c:1024
    #69 0x6a5110 in demangle_type rust-demangle.c:1024
    #70 0x6a5110 in demangle_type rust-demangle.c:1024
    #71 0x6a5110 in demangle_type rust-demangle.c:1024
    #72 0x6a5110 in demangle_type rust-demangle.c:1024
    #73 0x6a5110 in demangle_type rust-demangle.c:1024
    #74 0x6a5110 in demangle_type rust-demangle.c:1024
    #75 0x6a5110 in demangle_type rust-demangle.c:1024
    #76 0x6a5110 in demangle_type rust-demangle.c:1024
    #77 0x6a5110 in demangle_type rust-demangle.c:1024
    #78 0x6a5110 in demangle_type rust-demangle.c:1024
    #79 0x6a5110 in demangle_type rust-demangle.c:1024
    #80 0x6a5110 in demangle_type rust-demangle.c:1024
    #81 0x6a5110 in demangle_type rust-demangle.c:1024
    #82 0x6a5110 in demangle_type rust-demangle.c:1024
    #83 0x6a5110 in demangle_type rust-demangle.c:1024
    #84 0x6a5110 in demangle_type rust-demangle.c:1024
    #85 0x6a5110 in demangle_type rust-demangle.c:1024
    #86 0x6a5110 in demangle_type rust-demangle.c:1024
    #87 0x6a5110 in demangle_type rust-demangle.c:1024
    #88 0x6a5110 in demangle_type rust-demangle.c:1024
    #89 0x6a5110 in demangle_type rust-demangle.c:1024
    #90 0x6a5110 in demangle_type rust-demangle.c:1024
    #91 0x6a5110 in demangle_type rust-demangle.c:1024
    #92 0x6a5110 in demangle_type rust-demangle.c:1024
    #93 0x6a5110 in demangle_type rust-demangle.c:1024
    #94 0x6a5110 in demangle_type rust-demangle.c:1024
    #95 0x6a5110 in demangle_type rust-demangle.c:1024
    #96 0x6a5110 in demangle_type rust-demangle.c:1024
    #97 0x6a5110 in demangle_type rust-demangle.c:1024
    #98 0x6a5110 in demangle_type rust-demangle.c:1024
    #99 0x6a5110 in demangle_type rust-demangle.c:1024
    #100 0x6a5110 in demangle_type rust-demangle.c:1024
    #101 0x6a5110 in demangle_type rust-demangle.c:1024
    #102 0x6a5110 in demangle_type rust-demangle.c:1024
    #103 0x6a5110 in demangle_type rust-demangle.c:1024
    #104 0x6a5110 in demangle_type rust-demangle.c:1024
    #105 0x6a5110 in demangle_type rust-demangle.c:1024
    #106 0x6a5110 in demangle_type rust-demangle.c:1024
    #107 0x6a5110 in demangle_type rust-demangle.c:1024
    #108 0x6a5110 in demangle_type rust-demangle.c:1024
    #109 0x6a5110 in demangle_type rust-demangle.c:1024
    #110 0x6a5110 in demangle_type rust-demangle.c:1024
    #111 0x6a5110 in demangle_type rust-demangle.c:1024
    #112 0x6a5110 in demangle_type rust-demangle.c:1024
    #113 0x6a5110 in demangle_type rust-demangle.c:1024
    #114 0x6a5110 in demangle_type rust-demangle.c:1024
    #115 0x6a5110 in demangle_type rust-demangle.c:1024
    #116 0x6a5110 in demangle_type rust-demangle.c:1024
    #117 0x6a5110 in demangle_type rust-demangle.c:1024
    #118 0x6a5110 in demangle_type rust-demangle.c:1024
    #119 0x6a5110 in demangle_type rust-demangle.c:1024
    #120 0x6a5110 in demangle_type rust-demangle.c:1024
    #121 0x6a5110 in demangle_type rust-demangle.c:1024
    #122 0x6a5110 in demangle_type rust-demangle.c:1024
    #123 0x6a5110 in demangle_type rust-demangle.c:1024
    #124 0x6a5110 in demangle_type rust-demangle.c:1024
    #125 0x6a5110 in demangle_type rust-demangle.c:1024
    #126 0x6a5110 in demangle_type rust-demangle.c:1024
    #127 0x6a5110 in demangle_type rust-demangle.c:1024
    #128 0x6a5110 in demangle_type rust-demangle.c:1024
    #129 0x6a5110 in demangle_type rust-demangle.c:1024
    #130 0x6a5110 in demangle_type rust-demangle.c:1024
    #131 0x6a5110 in demangle_type rust-demangle.c:1024
    #132 0x6a5110 in demangle_type rust-demangle.c:1024
    #133 0x6a5110 in demangle_type rust-demangle.c:1024
    #134 0x6a5110 in demangle_type rust-demangle.c:1024
    #135 0x6a5110 in demangle_type rust-demangle.c:1024
    #136 0x6a5110 in demangle_type rust-demangle.c:1024
    #137 0x6a5110 in demangle_type rust-demangle.c:1024
    #138 0x6a5110 in demangle_type rust-demangle.c:1024
    #139 0x6a5110 in demangle_type rust-demangle.c:1024
    #140 0x6a5110 in demangle_type rust-demangle.c:1024
    #141 0x6a5110 in demangle_type rust-demangle.c:1024
    #142 0x6a5110 in demangle_type rust-demangle.c:1024
    #143 0x6a5110 in demangle_type rust-demangle.c:1024
    #144 0x6a5110 in demangle_type rust-demangle.c:1024
    #145 0x6a5110 in demangle_type rust-demangle.c:1024
    #146 0x6a5110 in demangle_type rust-demangle.c:1024
    #147 0x6a5110 in demangle_type rust-demangle.c:1024
    #148 0x6a5110 in demangle_type rust-demangle.c:1024
    #149 0x6a5110 in demangle_type rust-demangle.c:1024
    #150 0x6a5110 in demangle_type rust-demangle.c:1024
    #151 0x6a5110 in demangle_type rust-demangle.c:1024
    #152 0x6a5110 in demangle_type rust-demangle.c:1024
    #153 0x6a5110 in demangle_type rust-demangle.c:1024
    #154 0x6a5110 in demangle_type rust-demangle.c:1024
    #155 0x6a5110 in demangle_type rust-demangle.c:1024
    #156 0x6a5110 in demangle_type rust-demangle.c:1024
    #157 0x6a5110 in demangle_type rust-demangle.c:1024
    #158 0x6a5110 in demangle_type rust-demangle.c:1024
    #159 0x6a5110 in demangle_type rust-demangle.c:1024
    #160 0x6a5110 in demangle_type rust-demangle.c:1024
    #161 0x6a5110 in demangle_type rust-demangle.c:1024
    #162 0x6a5110 in demangle_type rust-demangle.c:1024
    #163 0x6a5110 in demangle_type rust-demangle.c:1024
    #164 0x6a5110 in demangle_type rust-demangle.c:1024
    #165 0x6a5110 in demangle_type rust-demangle.c:1024
    #166 0x6a5110 in demangle_type rust-demangle.c:1024
    #167 0x6a5110 in demangle_type rust-demangle.c:1024
    #168 0x6a5110 in demangle_type rust-demangle.c:1024
    #169 0x6a5110 in demangle_type rust-demangle.c:1024
    #170 0x6a5110 in demangle_type rust-demangle.c:1024
    #171 0x6a5110 in demangle_type rust-demangle.c:1024
    #172 0x6a5110 in demangle_type rust-demangle.c:1024
    #173 0x6a5110 in demangle_type rust-demangle.c:1024
    #174 0x6a5110 in demangle_type rust-demangle.c:1024
    #175 0x6a5110 in demangle_type rust-demangle.c:1024
    #176 0x6a5110 in demangle_type rust-demangle.c:1024
    #177 0x6a5110 in demangle_type rust-demangle.c:1024
    #178 0x6a5110 in demangle_type rust-demangle.c:1024
    #179 0x6a5110 in demangle_type rust-demangle.c:1024
    #180 0x6a5110 in demangle_type rust-demangle.c:1024
    #181 0x6a5110 in demangle_type rust-demangle.c:1024
    #182 0x6a5110 in demangle_type rust-demangle.c:1024
    #183 0x6a5110 in demangle_type rust-demangle.c:1024
    #184 0x6a5110 in demangle_type rust-demangle.c:1024
    #185 0x6a5110 in demangle_type rust-demangle.c:1024
    #186 0x6a5110 in demangle_type rust-demangle.c:1024
    #187 0x6a5110 in demangle_type rust-demangle.c:1024
    #188 0x6a5110 in demangle_type rust-demangle.c:1024
    #189 0x6a5110 in demangle_type rust-demangle.c:1024
    #190 0x6a5110 in demangle_type rust-demangle.c:1024
    #191 0x6a5110 in demangle_type rust-demangle.c:1024
    #192 0x6a5110 in demangle_type rust-demangle.c:1024
    #193 0x6a5110 in demangle_type rust-demangle.c:1024
    #194 0x6a5110 in demangle_type rust-demangle.c:1024
    #195 0x6a5110 in demangle_type rust-demangle.c:1024
    #196 0x6a5110 in demangle_type rust-demangle.c:1024
    #197 0x6a5110 in demangle_type rust-demangle.c:1024
    #198 0x6a5110 in demangle_type rust-demangle.c:1024
    #199 0x6a5110 in demangle_type rust-demangle.c:1024
    #200 0x6a5110 in demangle_type rust-demangle.c:1024
    #201 0x6a5110 in demangle_type rust-demangle.c:1024
    #202 0x6a5110 in demangle_type rust-demangle.c:1024
    #203 0x6a5110 in demangle_type rust-demangle.c:1024
    #204 0x6a5110 in demangle_type rust-demangle.c:1024
    #205 0x6a5110 in demangle_type rust-demangle.c:1024
    #206 0x6a5110 in demangle_type rust-demangle.c:1024
    #207 0x6a5110 in demangle_type rust-demangle.c:1024
    #208 0x6a5110 in demangle_type rust-demangle.c:1024
    #209 0x6a5110 in demangle_type rust-demangle.c:1024
    #210 0x6a5110 in demangle_type rust-demangle.c:1024
    #211 0x6a5110 in demangle_type rust-demangle.c:1024
    #212 0x6a5110 in demangle_type rust-demangle.c:1024
    #213 0x6a5110 in demangle_type rust-demangle.c:1024
    #214 0x6a5110 in demangle_type rust-demangle.c:1024
    #215 0x6a5110 in demangle_type rust-demangle.c:1024
    #216 0x6a5110 in demangle_type rust-demangle.c:1024
    #217 0x6a5110 in demangle_type rust-demangle.c:1024
    #218 0x6a5110 in demangle_type rust-demangle.c:1024
    #219 0x6a5110 in demangle_type rust-demangle.c:1024
    #220 0x6a5110 in demangle_type rust-demangle.c:1024
    #221 0x6a5110 in demangle_type rust-demangle.c:1024
    #222 0x6a5110 in demangle_type rust-demangle.c:1024
    #223 0x6a5110 in demangle_type rust-demangle.c:1024
    #224 0x6a5110 in demangle_type rust-demangle.c:1024
    #225 0x6a5110 in demangle_type rust-demangle.c:1024
    #226 0x6a5110 in demangle_type rust-demangle.c:1024
    #227 0x6a5110 in demangle_type rust-demangle.c:1024
    #228 0x6a5110 in demangle_type rust-demangle.c:1024
    #229 0x6a5110 in demangle_type rust-demangle.c:1024
    #230 0x6a5110 in demangle_type rust-demangle.c:1024
    #231 0x6a5110 in demangle_type rust-demangle.c:1024
    #232 0x6a5110 in demangle_type rust-demangle.c:1024
    #233 0x6a5110 in demangle_type rust-demangle.c:1024
    #234 0x6a5110 in demangle_type rust-demangle.c:1024
    #235 0x6a5110 in demangle_type rust-demangle.c:1024
    #236 0x6a5110 in demangle_type rust-demangle.c:1024
    #237 0x6a5110 in demangle_type rust-demangle.c:1024
    #238 0x6a5110 in demangle_type rust-demangle.c:1024
    #239 0x6a5110 in demangle_type rust-demangle.c:1024
    #240 0x6a5110 in demangle_type rust-demangle.c:1024
    #241 0x6a5110 in demangle_type rust-demangle.c:1024
    #242 0x6a5110 in demangle_type rust-demangle.c:1024
    #243 0x6a5110 in demangle_type rust-demangle.c:1024
    #244 0x6a5110 in demangle_type rust-demangle.c:1024
    #245 0x6a5110 in demangle_type rust-demangle.c:1024
    #246 0x6a5110 in demangle_type rust-demangle.c:1024
    #247 0x6a5110 in demangle_type rust-demangle.c:1024
    #248 0x6a5110 in demangle_type rust-demangle.c:1024
    #249 0x6a5110 in demangle_type rust-demangle.c:1024
    #250 0x6a5110 in demangle_type rust-demangle.c:1024
    #251 0x6a5110 in demangle_type rust-demangle.c:1024

SUMMARY: AddressSanitizer: stack-overflow rust-demangle.c:84 peek
==35495==ABORTING

See original description
chengxianglin (chengxianglin)
Changed in binutils (Ubuntu):
status: New → Confirmed
status: Confirmed → New
summary: - stack-overflow on GNU libiberty/rust-demangle.c:84 peek
+ stack-overflow on GNU libiberty/rust-demangle.c:1024 demangle_type
Revision history for this message
Matthias Klose (doko) wrote :

what value do these bug reports have? did you file these upstream? it's also not clear which version you are testing

Changed in binutils (Ubuntu):
status: New → Incomplete
chengxianglin (chengxianglin)
description: updated
chengxianglin (chengxianglin)
Changed in binutils (Ubuntu):
status: Incomplete → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.