At line of 3680 of
s->entsize should be checked against 0; otherwise, there could be a arithmetic fault. A test case to triggering this bug is attached and the command is
readelf -a readelf-6-323-A.
Program received signal SIGFPE, Arithmetic exception. 0x00000000004095bb in dump_liblist (re=0x7fffffffceb0) at readelf.c:3680 3680 printf("contains %ju entries:\n", s->sz / s->entsize); #0 0x00000000004095bb in dump_liblist (re=0x7fffffffceb0) at readelf.c:3680 #1 0x000000000040a7d4 in dump_arch_specific_info (re=0x7fffffffceb0) at readelf.c:4156 #2 0x0000000000410c43 in dump_elf (re=0x7fffffffceb0) at readelf.c:6224 #3 0x000000000041139a in dump_object (re=0x7fffffffceb0) at readelf.c:6374 #4 0x00000000004123ea in main (argc=1, argv=0x7fffffffd098) at readelf.c:6841
Log in to post a comment.