CVE-2021-32256: Bug #1927070 “stack-overflow on GNU libiberty/rust-demangle.c:10...” : Bugs : binutils package : Ubuntu

stack-overflow on GNU libiberty/rust-demangle.c:1024 demangle_type

This bug affects 1 person

Affects

Status

Importance

Assigned to

Milestone

binutils (Ubuntu)

Confirmed

Undecided

Unassigned

Bug Description

stack-overflowon GNU libiberty/rust-demangle.c:84 peek when we run
cat /crashes/poc | ./cxxfilt
the version : binutils(2.36)
/crashes/poc:
F}��.]]��_RYFB1_��z^A^R]M�^?N�^K^]�J^@^@^@^@^@^@^@^@���������^A^@������]^yCo#Mo?NCgyCo7MoPggCo~NMG^P#��=^F~@c�Cqot�_ZooSk;^]���������������������������]^yCo7Mo?NCgyCo7MoPggCo~NMG^P#^R�7Cg^V^A_���^?^@^A�_ZooSoBbg6^@g^_�@gg��g����!T^[

asan output:
root@f960c0e3747a:cat /crashes/poc | ./cxxfilt
ASAN:SIGSEGV
=================================================================
==35495==ERROR: AddressSanitizer: stack-overflow on address 0x7ffcda322ff8 (pc 0x0000006a0e3f bp 0x7ffcda323000 sp 0x7ffcda322ff0 T0)
#0 0x6a0e3e in peek rust-demangle.c:84
#1 0x6a0f96 in next rust-demangle.c:105
#2 0x6a478f in demangle_type rust-demangle.c:864
#3 0x6a5110 in demangle_type rust-demangle.c:1024
#4 0x6a5110 in demangle_type rust-demangle.c:1024
#5 0x6a5110 in demangle_type rust-demangle.c:1024
#6 0x6a5110 in demangle_type rust-demangle.c:1024
#7 0x6a5110 in demangle_type rust-demangle.c:1024
#8 0x6a5110 in demangle_type rust-demangle.c:1024
#9 0x6a5110 in demangle_type rust-demangle.c:1024
#10 0x6a5110 in demangle_type rust-demangle.c:1024
#11 0x6a5110 in demangle_type rust-demangle.c:1024
#12 0x6a5110 in demangle_type rust-demangle.c:1024
#13 0x6a5110 in demangle_type rust-demangle.c:1024
#14 0x6a5110 in demangle_type rust-demangle.c:1024
#15 0x6a5110 in demangle_type rust-demangle.c:1024
#16 0x6a5110 in demangle_type rust-demangle.c:1024
#17 0x6a5110 in demangle_type rust-demangle.c:1024
#18 0x6a5110 in demangle_type rust-demangle.c:1024
#19 0x6a5110 in demangle_type rust-demangle.c:1024
#20 0x6a5110 in demangle_type rust-demangle.c:1024
#21 0x6a5110 in demangle_type rust-demangle.c:1024
#22 0x6a5110 in demangle_type rust-demangle.c:1024
#23 0x6a5110 in demangle_type rust-demangle.c:1024
#24 0x6a5110 in demangle_type rust-demangle.c:1024
#25 0x6a5110 in demangle_type rust-demangle.c:1024
#26 0x6a5110 in demangle_type rust-demangle.c:1024
#27 0x6a5110 in demangle_type rust-demangle.c:1024
#28 0x6a5110 in demangle_type rust-demangle.c:1024
#29 0x6a5110 in demangle_type rust-demangle.c:1024
#30 0x6a5110 in demangle_type rust-demangle.c:1024
#31 0x6a5110 in demangle_type rust-demangle.c:1024
#32 0x6a5110 in demangle_type rust-demangle.c:1024
#33 0x6a5110 in demangle_type rust-demangle.c:1024
#34 0x6a5110 in demangle_type rust-demangle.c:1024
#35 0x6a5110 in demangle_type rust-demangle.c:1024
#36 0x6a5110 in demangle_type rust-demangle.c:1024
#37 0x6a5110 in demangle_type rust-demangle.c:1024
#38 0x6a5110 in demangle_type rust-demangle.c:1024
#39 0x6a5110 in demangle_type rust-demangle.c:1024
#40 0x6a5110 in demangle_type rust-demangle.c:1024
#41 0x6a5110 in demangle_type rust-demangle.c:1024
#42 0x6a5110 in demangle_type rust-demangle.c:1024
#43 0x6a5110 in demangle_type rust-demangle.c:1024
#44 0x6a5110 in demangle_type rust-demangle.c:1024
#45 0x6a5110 in demangle_type rust-demangle.c:1024
#46 0x6a5110 in demangle_type rust-demangle.c:1024
#47 0x6a5110 in demangle_type rust-demangle.c:1024
#48 0x6a5110 in demangle_type rust-demangle.c:1024
#49 0x6a5110 in demangle_type rust-demangle.c:1024
#50 0x6a5110 in demangle_type rust-demangle.c:1024
#51 0x6a5110 in demangle_type rust-demangle.c:1024
#52 0x6a5110 in demangle_type rust-demangle.c:1024
#53 0x6a5110 in demangle_type rust-demangle.c:1024
#54 0x6a5110 in demangle_type rust-demangle.c:1024
#55 0x6a5110 in demangle_type rust-demangle.c:1024
#56 0x6a5110 in demangle_type rust-demangle.c:1024
#57 0x6a5110 in demangle_type rust-demangle.c:1024
#58 0x6a5110 in demangle_type rust-demangle.c:1024
#59 0x6a5110 in demangle_type rust-demangle.c:1024
#60 0x6a5110 in demangle_type rust-demangle.c:1024
#61 0x6a5110 in demangle_type rust-demangle.c:1024
#62 0x6a5110 in demangle_type rust-demangle.c:1024
#63 0x6a5110 in demangle_type rust-demangle.c:1024
#64 0x6a5110 in demangle_type rust-demangle.c:1024
#65 0x6a5110 in demangle_type rust-demangle.c:1024
#66 0x6a5110 in demangle_type rust-demangle.c:1024
#67 0x6a5110 in demangle_type rust-demangle.c:1024
#68 0x6a5110 in demangle_type rust-demangle.c:1024
#69 0x6a5110 in demangle_type rust-demangle.c:1024
#70 0x6a5110 in demangle_type rust-demangle.c:1024
#71 0x6a5110 in demangle_type rust-demangle.c:1024
#72 0x6a5110 in demangle_type rust-demangle.c:1024
#73 0x6a5110 in demangle_type rust-demangle.c:1024
#74 0x6a5110 in demangle_type rust-demangle.c:1024
#75 0x6a5110 in demangle_type rust-demangle.c:1024
#76 0x6a5110 in demangle_type rust-demangle.c:1024
#77 0x6a5110 in demangle_type rust-demangle.c:1024
#78 0x6a5110 in demangle_type rust-demangle.c:1024
#79 0x6a5110 in demangle_type rust-demangle.c:1024
#80 0x6a5110 in demangle_type rust-demangle.c:1024
#81 0x6a5110 in demangle_type rust-demangle.c:1024
#82 0x6a5110 in demangle_type rust-demangle.c:1024
#83 0x6a5110 in demangle_type rust-demangle.c:1024
#84 0x6a5110 in demangle_type rust-demangle.c:1024
#85 0x6a5110 in demangle_type rust-demangle.c:1024
#86 0x6a5110 in demangle_type rust-demangle.c:1024
#87 0x6a5110 in demangle_type rust-demangle.c:1024
#88 0x6a5110 in demangle_type rust-demangle.c:1024
#89 0x6a5110 in demangle_type rust-demangle.c:1024
#90 0x6a5110 in demangle_type rust-demangle.c:1024
#91 0x6a5110 in demangle_type rust-demangle.c:1024
#92 0x6a5110 in demangle_type rust-demangle.c:1024
#93 0x6a5110 in demangle_type rust-demangle.c:1024
#94 0x6a5110 in demangle_type rust-demangle.c:1024
#95 0x6a5110 in demangle_type rust-demangle.c:1024
#96 0x6a5110 in demangle_type rust-demangle.c:1024
#97 0x6a5110 in demangle_type rust-demangle.c:1024
#98 0x6a5110 in demangle_type rust-demangle.c:1024
#99 0x6a5110 in demangle_type rust-demangle.c:1024
#100 0x6a5110 in demangle_type rust-demangle.c:1024
#101 0x6a5110 in demangle_type rust-demangle.c:1024
#102 0x6a5110 in demangle_type rust-demangle.c:1024
#103 0x6a5110 in demangle_type rust-demangle.c:1024
#104 0x6a5110 in demangle_type rust-demangle.c:1024
#105 0x6a5110 in demangle_type rust-demangle.c:1024
#106 0x6a5110 in demangle_type rust-demangle.c:1024
#107 0x6a5110 in demangle_type rust-demangle.c:1024
#108 0x6a5110 in demangle_type rust-demangle.c:1024
#109 0x6a5110 in demangle_type rust-demangle.c:1024
#110 0x6a5110 in demangle_type rust-demangle.c:1024
#111 0x6a5110 in demangle_type rust-demangle.c:1024
#112 0x6a5110 in demangle_type rust-demangle.c:1024
#113 0x6a5110 in demangle_type rust-demangle.c:1024
#114 0x6a5110 in demangle_type rust-demangle.c:1024
#115 0x6a5110 in demangle_type rust-demangle.c:1024
#116 0x6a5110 in demangle_type rust-demangle.c:1024
#117 0x6a5110 in demangle_type rust-demangle.c:1024
#118 0x6a5110 in demangle_type rust-demangle.c:1024
#119 0x6a5110 in demangle_type rust-demangle.c:1024
#120 0x6a5110 in demangle_type rust-demangle.c:1024
#121 0x6a5110 in demangle_type rust-demangle.c:1024
#122 0x6a5110 in demangle_type rust-demangle.c:1024
#123 0x6a5110 in demangle_type rust-demangle.c:1024
#124 0x6a5110 in demangle_type rust-demangle.c:1024
#125 0x6a5110 in demangle_type rust-demangle.c:1024
#126 0x6a5110 in demangle_type rust-demangle.c:1024
#127 0x6a5110 in demangle_type rust-demangle.c:1024
#128 0x6a5110 in demangle_type rust-demangle.c:1024
#129 0x6a5110 in demangle_type rust-demangle.c:1024
#130 0x6a5110 in demangle_type rust-demangle.c:1024
#131 0x6a5110 in demangle_type rust-demangle.c:1024
#132 0x6a5110 in demangle_type rust-demangle.c:1024
#133 0x6a5110 in demangle_type rust-demangle.c:1024
#134 0x6a5110 in demangle_type rust-demangle.c:1024
#135 0x6a5110 in demangle_type rust-demangle.c:1024
#136 0x6a5110 in demangle_type rust-demangle.c:1024
#137 0x6a5110 in demangle_type rust-demangle.c:1024
#138 0x6a5110 in demangle_type rust-demangle.c:1024
#139 0x6a5110 in demangle_type rust-demangle.c:1024
#140 0x6a5110 in demangle_type rust-demangle.c:1024
#141 0x6a5110 in demangle_type rust-demangle.c:1024
#142 0x6a5110 in demangle_type rust-demangle.c:1024
#143 0x6a5110 in demangle_type rust-demangle.c:1024
#144 0x6a5110 in demangle_type rust-demangle.c:1024
#145 0x6a5110 in demangle_type rust-demangle.c:1024
#146 0x6a5110 in demangle_type rust-demangle.c:1024
#147 0x6a5110 in demangle_type rust-demangle.c:1024
#148 0x6a5110 in demangle_type rust-demangle.c:1024
#149 0x6a5110 in demangle_type rust-demangle.c:1024
#150 0x6a5110 in demangle_type rust-demangle.c:1024
#151 0x6a5110 in demangle_type rust-demangle.c:1024
#152 0x6a5110 in demangle_type rust-demangle.c:1024
#153 0x6a5110 in demangle_type rust-demangle.c:1024
#154 0x6a5110 in demangle_type rust-demangle.c:1024
#155 0x6a5110 in demangle_type rust-demangle.c:1024
#156 0x6a5110 in demangle_type rust-demangle.c:1024
#157 0x6a5110 in demangle_type rust-demangle.c:1024
#158 0x6a5110 in demangle_type rust-demangle.c:1024
#159 0x6a5110 in demangle_type rust-demangle.c:1024
#160 0x6a5110 in demangle_type rust-demangle.c:1024
#161 0x6a5110 in demangle_type rust-demangle.c:1024
#162 0x6a5110 in demangle_type rust-demangle.c:1024
#163 0x6a5110 in demangle_type rust-demangle.c:1024
#164 0x6a5110 in demangle_type rust-demangle.c:1024
#165 0x6a5110 in demangle_type rust-demangle.c:1024
#166 0x6a5110 in demangle_type rust-demangle.c:1024
#167 0x6a5110 in demangle_type rust-demangle.c:1024
#168 0x6a5110 in demangle_type rust-demangle.c:1024
#169 0x6a5110 in demangle_type rust-demangle.c:1024
#170 0x6a5110 in demangle_type rust-demangle.c:1024
#171 0x6a5110 in demangle_type rust-demangle.c:1024
#172 0x6a5110 in demangle_type rust-demangle.c:1024
#173 0x6a5110 in demangle_type rust-demangle.c:1024
#174 0x6a5110 in demangle_type rust-demangle.c:1024
#175 0x6a5110 in demangle_type rust-demangle.c:1024
#176 0x6a5110 in demangle_type rust-demangle.c:1024
#177 0x6a5110 in demangle_type rust-demangle.c:1024
#178 0x6a5110 in demangle_type rust-demangle.c:1024
#179 0x6a5110 in demangle_type rust-demangle.c:1024
#180 0x6a5110 in demangle_type rust-demangle.c:1024
#181 0x6a5110 in demangle_type rust-demangle.c:1024
#182 0x6a5110 in demangle_type rust-demangle.c:1024
#183 0x6a5110 in demangle_type rust-demangle.c:1024
#184 0x6a5110 in demangle_type rust-demangle.c:1024
#185 0x6a5110 in demangle_type rust-demangle.c:1024
#186 0x6a5110 in demangle_type rust-demangle.c:1024
#187 0x6a5110 in demangle_type rust-demangle.c:1024
#188 0x6a5110 in demangle_type rust-demangle.c:1024
#189 0x6a5110 in demangle_type rust-demangle.c:1024
#190 0x6a5110 in demangle_type rust-demangle.c:1024
#191 0x6a5110 in demangle_type rust-demangle.c:1024
#192 0x6a5110 in demangle_type rust-demangle.c:1024
#193 0x6a5110 in demangle_type rust-demangle.c:1024
#194 0x6a5110 in demangle_type rust-demangle.c:1024
#195 0x6a5110 in demangle_type rust-demangle.c:1024
#196 0x6a5110 in demangle_type rust-demangle.c:1024
#197 0x6a5110 in demangle_type rust-demangle.c:1024
#198 0x6a5110 in demangle_type rust-demangle.c:1024
#199 0x6a5110 in demangle_type rust-demangle.c:1024
#200 0x6a5110 in demangle_type rust-demangle.c:1024
#201 0x6a5110 in demangle_type rust-demangle.c:1024
#202 0x6a5110 in demangle_type rust-demangle.c:1024
#203 0x6a5110 in demangle_type rust-demangle.c:1024
#204 0x6a5110 in demangle_type rust-demangle.c:1024
#205 0x6a5110 in demangle_type rust-demangle.c:1024
#206 0x6a5110 in demangle_type rust-demangle.c:1024
#207 0x6a5110 in demangle_type rust-demangle.c:1024
#208 0x6a5110 in demangle_type rust-demangle.c:1024
#209 0x6a5110 in demangle_type rust-demangle.c:1024
#210 0x6a5110 in demangle_type rust-demangle.c:1024
#211 0x6a5110 in demangle_type rust-demangle.c:1024
#212 0x6a5110 in demangle_type rust-demangle.c:1024
#213 0x6a5110 in demangle_type rust-demangle.c:1024
#214 0x6a5110 in demangle_type rust-demangle.c:1024
#215 0x6a5110 in demangle_type rust-demangle.c:1024
#216 0x6a5110 in demangle_type rust-demangle.c:1024
#217 0x6a5110 in demangle_type rust-demangle.c:1024
#218 0x6a5110 in demangle_type rust-demangle.c:1024
#219 0x6a5110 in demangle_type rust-demangle.c:1024
#220 0x6a5110 in demangle_type rust-demangle.c:1024
#221 0x6a5110 in demangle_type rust-demangle.c:1024
#222 0x6a5110 in demangle_type rust-demangle.c:1024
#223 0x6a5110 in demangle_type rust-demangle.c:1024
#224 0x6a5110 in demangle_type rust-demangle.c:1024
#225 0x6a5110 in demangle_type rust-demangle.c:1024
#226 0x6a5110 in demangle_type rust-demangle.c:1024
#227 0x6a5110 in demangle_type rust-demangle.c:1024
#228 0x6a5110 in demangle_type rust-demangle.c:1024
#229 0x6a5110 in demangle_type rust-demangle.c:1024
#230 0x6a5110 in demangle_type rust-demangle.c:1024
#231 0x6a5110 in demangle_type rust-demangle.c:1024
#232 0x6a5110 in demangle_type rust-demangle.c:1024
#233 0x6a5110 in demangle_type rust-demangle.c:1024
#234 0x6a5110 in demangle_type rust-demangle.c:1024
#235 0x6a5110 in demangle_type rust-demangle.c:1024
#236 0x6a5110 in demangle_type rust-demangle.c:1024
#237 0x6a5110 in demangle_type rust-demangle.c:1024
#238 0x6a5110 in demangle_type rust-demangle.c:1024
#239 0x6a5110 in demangle_type rust-demangle.c:1024
#240 0x6a5110 in demangle_type rust-demangle.c:1024
#241 0x6a5110 in demangle_type rust-demangle.c:1024
#242 0x6a5110 in demangle_type rust-demangle.c:1024
#243 0x6a5110 in demangle_type rust-demangle.c:1024
#244 0x6a5110 in demangle_type rust-demangle.c:1024
#245 0x6a5110 in demangle_type rust-demangle.c:1024
#246 0x6a5110 in demangle_type rust-demangle.c:1024
#247 0x6a5110 in demangle_type rust-demangle.c:1024
#248 0x6a5110 in demangle_type rust-demangle.c:1024
#249 0x6a5110 in demangle_type rust-demangle.c:1024
#250 0x6a5110 in demangle_type rust-demangle.c:1024
#251 0x6a5110 in demangle_type rust-demangle.c:1024

SUMMARY: AddressSanitizer: stack-overflow rust-demangle.c:84 peek
==35495==ABORTING