https://sourceware.org/bugzilla/show_bug.cgi?id=34862

            Bug ID: 34862
           Summary: GNU BFD writes COFF1 relocation bytes into TMS320C54x
                    COFF0 output
           Product: binutils
           Version: 2.47
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: ld
          Assignee: unassigned at sourceware dot org
          Reporter: basavesh.shivakumar at wsu dot edu
  Target Milestone: ---

Created attachment 17181
  --> https://sourceware.org/bugzilla/attachment.cgi?id=17181&action=edit
repro

I'm reporting this bug on behalf of my team: Ananta Srikar Puranam, Emily West,
Dr. Swarn Priya, Dr. Peng Gao and Dr. Basavesh Ammanaghatta Shivakumar.

Summary
=======

GNU BFD serializes a twelve-byte COFF1 relocation through coff_swap_reloc_out
while writing a ten-byte TMS320C54x COFF0 record; released 2.46 and current
2.47.50.20261016 exit 0 but emit the same malformed object whose relocation
reserved field becomes 2 and type becomes 0, and both an independent reader and
BFD objdump reject it.

Reproduction
============

1. Download and extract
`bfd-tic54x-coff0-relocation-layout-overlap-reproducer.tar.gz`.
2. Run the following command with an ld.bfd or all-target `ld-new` binary that
   supports the emulation used by the reproducer:

       LD_BFD=/path/to/ld-new sh repro.sh

The archive contains the fixed input files, independent controls, helper
scripts needed by `repro.sh`, and their checksums. The script uses a temporary
directory and does not modify the source tree.

Observed result
===============

GNU BFD serializes a twelve-byte COFF1 relocation through coff_swap_reloc_out
while writing a ten-byte TMS320C54x COFF0 record; released 2.46 and current
2.47.50.20261016 exit 0 but emit the same malformed object whose relocation
reserved field becomes 2 and type becomes 0, and both an independent reader and
BFD objdump reject it.

Expected result
===============

GNU ld should either produce the correct output or reject the input with a
normal diagnostic. It should not crash, hang, execute undefined behavior, read
outside an input-derived allocation, or produce the described malformed
output.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to