pending/2280: gdb crashes when processing a UPX file

[ismail at pardus dot org dot tr]

>Number:         2280
>Category:       pending
>Synopsis:       gdb crashes when processing a UPX file
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    unassigned
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sun Jul 01 21:18:01 UTC 2007
>Closed-Date:
>Last-Modified:
>Originator:     ismail@pardus.org.tr
>Release:        6.6.50.20070701-cvs
>Organization:
>Environment:
Linux 2.6 x86
>Description:
Gdb crashes when trying to process a upx file.
>How-To-Repeat:
Run  attached file with gdb :

[~/gdb-overflow]> gdb gdb
GNU gdb 6.6.50.20070701-cvs
Copyright (C) 2007 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) run gdbupx
Starting program: /usr/local/bin/gdb gdbupx
GNU gdb 6.6.50.20070701-cvs
Copyright (C) 2007 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...

Program received signal SIGSEGV, Segmentation fault.
0x08153426 in process_coff_symbol (cs=0xafa6cf20, aux=0x82ef0f4, objfile=0x83364e0) at coffread.c:1484
1484    coffread.c: No such file or directory.
        in coffread.c
(gdb) bt
#0  0x08153426 in process_coff_symbol (cs=0xafa6cf20, aux=0x82ef0f4, objfile=0x83364e0) at coffread.c:1484
#1  0x08153e30 in coff_symfile_read (objfile=0x83364e0, mainline=1) at coffread.c:1086
#2  0x081115a4 in syms_from_objfile (objfile=0x83364e0, addrs=0x832fab0, offsets=0x0, num_offsets=0, mainline=1, verbo=0) at symfile.c:949
#3  0x0811199e in symbol_file_add_with_addrs_or_offsets (abfd=0x832f9f0, from_tty=0, addrs=0x0, offsets=0x0, num_offsets=0, mainline=1, flags=0)
    at symfile.c:1061
#4  0x08112746 in symbol_file_add_main_1 (args=0x832f9f0 "\001", from_tty=137125664, flags=0) at symfile.c:1194
#5  0x08129a39 in catch_command_errors (command=0x81128c0 <symbol_file_add_main>, arg=0xafa6f243 "gdbupx", from_tty=0, mask=6) at exceptions.c:530
#6  0x0808756d in captured_main (data=0xafa6d224) at .././gdb/main.c:735
#7  0x08129ac3 in catch_errors (func=0x8086c50 <captured_main>, func_args=0xafa6d224, errstring=0x8257b6b "", mask=6) at exceptions.c:515
#8  0x08086c01 in gdb_main (args=0xafa6d224) at .././gdb/main.c:881
#9  0x08086bc5 in main (argc=Cannot access memory at address 0x0
) at gdb.c:35
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:
----gnatsweb-attachment----
Content-Type: application/octet-stream; name="gdbupx"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="gdbupx"
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