Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rz-bin segment fault in msf_stream_directory_free with -P option #4893

Open
Ekkosun opened this issue Feb 12, 2025 · 0 comments
Open

rz-bin segment fault in msf_stream_directory_free with -P option #4893

Ekkosun opened this issue Feb 12, 2025 · 0 comments

Comments

@Ekkosun
Copy link

Ekkosun commented Feb 12, 2025

Work environment

Questions Answers
OS/arch/bits (mandatory) Ubuntu 20.04.6 LTS
File format of the file you reverse (mandatory) ELF
Architecture/bits of the file (mandatory) x86/64
rizin -v full output, not truncated (mandatory) rizin 0.8.0 @ linux-x86-64
commit: 309f574

Expected behavior

Not segment fault

Actual behavior

Segment fault

Steps to reproduce the behavior

  • poc
  • run cmd rz-bin -P $poc

Additional Logs, screenshots, source code, configuration dump, ...

./rizin/bins/bin/rz-bin -P /tmp/poc
ERROR: PDB Signature Error!
AddressSanitizer:DEADLYSIGNAL

==1551409==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000008 (pc 0x7f80b40918f9 bp 0x7ffd75d2c8f0 sp 0x7ffd75d2c8d0 T0)
==1551409==The signal is caused by a READ memory access.
==1551409==Hint: address points to the zero page.
#0 0x7f80b40918f8 in msf_stream_directory_free ../librz/bin/pdb/pdb.c:113
#1 0x7f80b4093db5 in rz_bin_pdb_free ../librz/bin/pdb/pdb.c:383
#2 0x7f80b4093cf9 in rz_bin_pdb_parse_from_buf ../librz/bin/pdb/pdb.c:367
#3 0x7f80b409362a in rz_bin_pdb_parse_from_file ../librz/bin/pdb/pdb.c:317
#4 0x7f80b35e19a9 in rz_core_pdb_load_info ../librz/core/cpdb.c:321
#5 0x7f80b353eacb in rz_core_bin_print ../librz/core/cbin.c:465
#6 0x7f80b85a149f in rz_main_rz_bin ../librz/main/rz-bin.c:1333
#7 0x55efca7da1b4 in main ../binrz/rz-bin/rz-bin.c:8
#8 0x7f80b839b082 in __libc_start_main ../csu/libc-start.c:308
#9 0x55efca7da0cd in _start (/data/swj/optfuzz/benchmark/rizin/bins/bin/rz-bin+0x10cd)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ../librz/bin/pdb/pdb.c:113 in msf_stream_directory_free
==1551409==ABORTING

@notxvilka notxvilka added this to the 0.8.0 milestone Feb 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants