This is the mail archive of the
gdb-testers@sourceware.org
mailing list for the GDB project.
[binutils-gdb] libiberty: demangler crash with missing :? or fold expression component.
- From: sergiodj+buildbot at sergiodj dot net
- To: gdb-testers at sourceware dot org
- Date: Fri, 18 Nov 2016 19:42:49 -0500
- Subject: [binutils-gdb] libiberty: demangler crash with missing :? or fold expression component.
- Authentication-results: sourceware.org; auth=none
*** TEST RESULTS FOR COMMIT ddc5804ebd4b2be29ad4e3e259f5c6e907f34f26 ***
Author: Mark Wielaard <mark@klomp.org>
Branch: master
Commit: ddc5804ebd4b2be29ad4e3e259f5c6e907f34f26
libiberty: demangler crash with missing :? or fold expression component.
When constructing an :? or fold expression that requires a third
expression only the first and second were explicitly checked to
not be NULL. Since the third expression is also required in these
constructs it needs to be explicitly checked and rejected when missing.
Otherwise the demangler will crash once it tries to d_print the
NULL component. Added two examples to demangle-expected of strings
that would crash before this fix.
Found by American Fuzzy Lop (afl) fuzzer.