Don't trust the ar header offset and size. When creating an Elf
descriptor for an ar member check the offset isn't past the end of the
containing Elf and don't use/set the member maximum_size larger than
the remaining size of the parent.
* libelf/elf_begin.c (dup_elf): Only call read_file
On Fri, Sep 5, 2025 at 6:24 PM Mark Wielaard wrote:
>
> Hi Aaron,
>
> On Fri, Sep 05, 2025 at 03:41:53PM -0400, Aaron Merey wrote:
> > If libdw_open_elf detects an invalid ELF file, it may attempt to
> > temporarily treat it as an ELF archive in order to check if there's
> > a valid ELF file follo
https://sourceware.org/bugzilla/show_bug.cgi?id=33382
Bug ID: 33382
Summary: Investigate unlock/wrlock pattern
Product: elfutils
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: general
Hi Evgeny,
On Sat, Sep 06, 2025 at 05:18:57PM +0300, Evgeny wrote:
> On Sat, 6 Sept 2025 at 13:50, Mark Wielaard wrote:
> > This, plus Aaron's fix for libdw_open_elf, should resolve the ossfuzz
> > issues.
>
> I can confirm that this patch (combined with the patch where libdw_open_elf
> is fixed
A new failure has been detected on builder elfutils-debian-armhf while building
elfutils.
Full details are available at:
https://builder.sourceware.org/buildbot/#/builders/6/builds/437
Build state: failed test (failure)
Revision: 685e4ad915f0c594696d9fdae9ab4074d250392d
Worker: debian-armhf
