https://sourceware.org/bugzilla/show_bug.cgi?id=34864

            Bug ID: 34864
           Summary: GNU ld allocates declared COFF input-section sizes as
                    one ELF final-link buffer
           Product: binutils
           Version: 2.46
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: ld
          Assignee: unassigned at sourceware dot org
          Reporter: basavesh.shivakumar at wsu dot edu
  Target Milestone: ---

Created attachment 17183
  --> https://sourceware.org/bugzilla/attachment.cgi?id=17183&action=edit
repro

I'm reporting this bug on behalf of my team: Ananta Srikar Puranam, Emily West,
Dr. Swarn Priya, Dr. Peng Gao and Dr. Basavesh Ammanaghatta Shivakumar.


Summary
=======

A 140-byte TMS320C54x COFF0 input and a 64-byte native MIPS ECOFF sibling make
GNU ld allocate their declared section sizes as `_bfd_elf_final_link` scratch
space; exact one-byte controls avoid the 0x20000068-byte and 0x40000000-byte
requests on current and GNU ld 2.46.

Reproduction
============

1. Download and extract
`bfd-tic54x-section-size-max-buffer-memory-dos-reproducer.tar.gz`.
2. Run the following command with an ld.bfd or all-target `ld-new` binary that
   supports the emulation used by the reproducer:

       LD_BFD=/path/to/ld-new sh repro.sh

The archive contains the fixed input files, independent controls, helper
scripts needed by `repro.sh`, and their checksums. The script uses a temporary
directory and does not modify the source tree.

Observed result
===============

A 140-byte TMS320C54x COFF0 input and a 64-byte native MIPS ECOFF sibling make
GNU ld allocate their declared section sizes as `_bfd_elf_final_link` scratch
space; exact one-byte controls avoid the 0x20000068-byte and 0x40000000-byte
requests on current and GNU ld 2.46.

Expected result
===============

GNU ld should either produce the correct output or reject the input with a
normal diagnostic. It should not crash, hang, execute undefined behavior, read
outside an input-derived allocation, or produce the described malformed
output.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Reply via email to