stack-overflow on GNU libiberty/rust-demangle.c:664 demangle_path

Bug #1925348 reported by chengxianglin
20
This bug affects 1 person
Affects Status Importance Assigned to Milestone
binutils (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

stack-overflowon GNU libiberty/rust-demangle.c:664 demangle_path when we run ./cxxfilt ./crashs/poc

./crash/poc:�@}����@�^_RB_RB999IRB�RB9999RB

==34504==ERROR: AddressSanitizer: stack-overflow on address 0x7ffee6038f48 (pc 0x0000006a3331 bp 0x7ffee6039060 sp 0x7ffee6038f20 T0)
    #0 0x6a3330 in demangle_path rust-demangle.c:664
    #1 0x6a3bd1 in demangle_path rust-demangle.c:774
    #2 0x6a3bd1 in demangle_path rust-demangle.c:774
    #3 0x6a3bd1 in demangle_path rust-demangle.c:774
    #4 0x6a3bd1 in demangle_path rust-demangle.c:774
    #5 0x6a3bd1 in demangle_path rust-demangle.c:774
    #6 0x6a3bd1 in demangle_path rust-demangle.c:774
    #7 0x6a3bd1 in demangle_path rust-demangle.c:774
    #8 0x6a3bd1 in demangle_path rust-demangle.c:774
    #9 0x6a3bd1 in demangle_path rust-demangle.c:774
    #10 0x6a3bd1 in demangle_path rust-demangle.c:774
    #11 0x6a3bd1 in demangle_path rust-demangle.c:774
    #12 0x6a3bd1 in demangle_path rust-demangle.c:774
    #13 0x6a3bd1 in demangle_path rust-demangle.c:774
    #14 0x6a3bd1 in demangle_path rust-demangle.c:774
    #15 0x6a3bd1 in demangle_path rust-demangle.c:774
    #16 0x6a3bd1 in demangle_path rust-demangle.c:774
    #17 0x6a3bd1 in demangle_path rust-demangle.c:774
    #18 0x6a3bd1 in demangle_path rust-demangle.c:774
    #19 0x6a3bd1 in demangle_path rust-demangle.c:774
    #20 0x6a3bd1 in demangle_path rust-demangle.c:774
    #21 0x6a3bd1 in demangle_path rust-demangle.c:774
    #22 0x6a3bd1 in demangle_path rust-demangle.c:774
    #23 0x6a3bd1 in demangle_path rust-demangle.c:774
    #24 0x6a3bd1 in demangle_path rust-demangle.c:774
    #25 0x6a3bd1 in demangle_path rust-demangle.c:774
    #26 0x6a3bd1 in demangle_path rust-demangle.c:774
    #27 0x6a3bd1 in demangle_path rust-demangle.c:774
    #28 0x6a3bd1 in demangle_path rust-demangle.c:774
    #29 0x6a3bd1 in demangle_path rust-demangle.c:774
    #30 0x6a3bd1 in demangle_path rust-demangle.c:774
    #31 0x6a3bd1 in demangle_path rust-demangle.c:774
    #32 0x6a3bd1 in demangle_path rust-demangle.c:774
    #33 0x6a3bd1 in demangle_path rust-demangle.c:774
    #34 0x6a3bd1 in demangle_path rust-demangle.c:774
    #35 0x6a3bd1 in demangle_path rust-demangle.c:774
    #36 0x6a3bd1 in demangle_path rust-demangle.c:774
    #37 0x6a3bd1 in demangle_path rust-demangle.c:774
    #38 0x6a3bd1 in demangle_path rust-demangle.c:774
    #39 0x6a3bd1 in demangle_path rust-demangle.c:774
    #40 0x6a3bd1 in demangle_path rust-demangle.c:774
    #41 0x6a3bd1 in demangle_path rust-demangle.c:774
    #42 0x6a3bd1 in demangle_path rust-demangle.c:774
    #43 0x6a3bd1 in demangle_path rust-demangle.c:774
    #44 0x6a3bd1 in demangle_path rust-demangle.c:774
    #45 0x6a3bd1 in demangle_path rust-demangle.c:774
    #46 0x6a3bd1 in demangle_path rust-demangle.c:774
    #47 0x6a3bd1 in demangle_path rust-demangle.c:774
    #48 0x6a3bd1 in demangle_path rust-demangle.c:774
    #49 0x6a3bd1 in demangle_path rust-demangle.c:774
    #50 0x6a3bd1 in demangle_path rust-demangle.c:774
    #51 0x6a3bd1 in demangle_path rust-demangle.c:774
    #52 0x6a3bd1 in demangle_path rust-demangle.c:774
    #53 0x6a3bd1 in demangle_path rust-demangle.c:774
    #54 0x6a3bd1 in demangle_path rust-demangle.c:774
    #55 0x6a3bd1 in demangle_path rust-demangle.c:774
    #56 0x6a3bd1 in demangle_path rust-demangle.c:774
    #57 0x6a3bd1 in demangle_path rust-demangle.c:774
    #58 0x6a3bd1 in demangle_path rust-demangle.c:774
    #59 0x6a3bd1 in demangle_path rust-demangle.c:774
    #60 0x6a3bd1 in demangle_path rust-demangle.c:774
    #61 0x6a3bd1 in demangle_path rust-demangle.c:774
    #62 0x6a3bd1 in demangle_path rust-demangle.c:774
    #63 0x6a3bd1 in demangle_path rust-demangle.c:774
    #64 0x6a3bd1 in demangle_path rust-demangle.c:774
    #65 0x6a3bd1 in demangle_path rust-demangle.c:774
    #66 0x6a3bd1 in demangle_path rust-demangle.c:774
    #67 0x6a3bd1 in demangle_path rust-demangle.c:774
    #68 0x6a3bd1 in demangle_path rust-demangle.c:774
    #69 0x6a3bd1 in demangle_path rust-demangle.c:774
    #70 0x6a3bd1 in demangle_path rust-demangle.c:774
    #71 0x6a3bd1 in demangle_path rust-demangle.c:774
    #72 0x6a3bd1 in demangle_path rust-demangle.c:774
    #73 0x6a3bd1 in demangle_path rust-demangle.c:774
    #74 0x6a3bd1 in demangle_path rust-demangle.c:774
    #75 0x6a3bd1 in demangle_path rust-demangle.c:774
    #76 0x6a3bd1 in demangle_path rust-demangle.c:774
    #77 0x6a3bd1 in demangle_path rust-demangle.c:774
    #78 0x6a3bd1 in demangle_path rust-demangle.c:774
    #79 0x6a3bd1 in demangle_path rust-demangle.c:774
    #80 0x6a3bd1 in demangle_path rust-demangle.c:774
    #81 0x6a3bd1 in demangle_path rust-demangle.c:774
    #82 0x6a3bd1 in demangle_path rust-demangle.c:774
    #83 0x6a3bd1 in demangle_path rust-demangle.c:774
    #84 0x6a3bd1 in demangle_path rust-demangle.c:774
    #85 0x6a3bd1 in demangle_path rust-demangle.c:774
    #86 0x6a3bd1 in demangle_path rust-demangle.c:774
    #87 0x6a3bd1 in demangle_path rust-demangle.c:774
    #88 0x6a3bd1 in demangle_path rust-demangle.c:774
    #89 0x6a3bd1 in demangle_path rust-demangle.c:774
    #90 0x6a3bd1 in demangle_path rust-demangle.c:774
    #91 0x6a3bd1 in demangle_path rust-demangle.c:774
    #92 0x6a3bd1 in demangle_path rust-demangle.c:774
    #93 0x6a3bd1 in demangle_path rust-demangle.c:774
    #94 0x6a3bd1 in demangle_path rust-demangle.c:774
    #95 0x6a3bd1 in demangle_path rust-demangle.c:774
    #96 0x6a3bd1 in demangle_path rust-demangle.c:774
    #97 0x6a3bd1 in demangle_path rust-demangle.c:774
    #98 0x6a3bd1 in demangle_path rust-demangle.c:774
    #99 0x6a3bd1 in demangle_path rust-demangle.c:774
    #100 0x6a3bd1 in demangle_path rust-demangle.c:774
    #101 0x6a3bd1 in demangle_path rust-demangle.c:774
    #102 0x6a3bd1 in demangle_path rust-demangle.c:774
    #103 0x6a3bd1 in demangle_path rust-demangle.c:774
    #104 0x6a3bd1 in demangle_path rust-demangle.c:774
    #105 0x6a3bd1 in demangle_path rust-demangle.c:774
    #106 0x6a3bd1 in demangle_path rust-demangle.c:774
    #107 0x6a3bd1 in demangle_path rust-demangle.c:774
    #108 0x6a3bd1 in demangle_path rust-demangle.c:774
    #109 0x6a3bd1 in demangle_path rust-demangle.c:774
    #110 0x6a3bd1 in demangle_path rust-demangle.c:774
    #111 0x6a3bd1 in demangle_path rust-demangle.c:774
    #112 0x6a3bd1 in demangle_path rust-demangle.c:774
    #113 0x6a3bd1 in demangle_path rust-demangle.c:774
    #114 0x6a3bd1 in demangle_path rust-demangle.c:774
    #115 0x6a3bd1 in demangle_path rust-demangle.c:774
    #116 0x6a3bd1 in demangle_path rust-demangle.c:774
    #117 0x6a3bd1 in demangle_path rust-demangle.c:774
    #118 0x6a3bd1 in demangle_path rust-demangle.c:774
    #119 0x6a3bd1 in demangle_path rust-demangle.c:774
    #120 0x6a3bd1 in demangle_path rust-demangle.c:774
    #121 0x6a3bd1 in demangle_path rust-demangle.c:774
    #122 0x6a3bd1 in demangle_path rust-demangle.c:774
    #123 0x6a3bd1 in demangle_path rust-demangle.c:774
    #124 0x6a3bd1 in demangle_path rust-demangle.c:774
    #125 0x6a3bd1 in demangle_path rust-demangle.c:774
    #126 0x6a3bd1 in demangle_path rust-demangle.c:774
    #127 0x6a3bd1 in demangle_path rust-demangle.c:774
    #128 0x6a3bd1 in demangle_path rust-demangle.c:774
    #129 0x6a3bd1 in demangle_path rust-demangle.c:774
    #130 0x6a3bd1 in demangle_path rust-demangle.c:774
    #131 0x6a3bd1 in demangle_path rust-demangle.c:774
    #132 0x6a3bd1 in demangle_path rust-demangle.c:774
    #133 0x6a3bd1 in demangle_path rust-demangle.c:774
    #134 0x6a3bd1 in demangle_path rust-demangle.c:774
    #135 0x6a3bd1 in demangle_path rust-demangle.c:774
    #136 0x6a3bd1 in demangle_path rust-demangle.c:774
    #137 0x6a3bd1 in demangle_path rust-demangle.c:774
    #138 0x6a3bd1 in demangle_path rust-demangle.c:774
    #139 0x6a3bd1 in demangle_path rust-demangle.c:774
    #140 0x6a3bd1 in demangle_path rust-demangle.c:774
    #141 0x6a3bd1 in demangle_path rust-demangle.c:774
    #142 0x6a3bd1 in demangle_path rust-demangle.c:774
    #143 0x6a3bd1 in demangle_path rust-demangle.c:774
    #144 0x6a3bd1 in demangle_path rust-demangle.c:774
    #145 0x6a3bd1 in demangle_path rust-demangle.c:774
    #146 0x6a3bd1 in demangle_path rust-demangle.c:774
    #147 0x6a3bd1 in demangle_path rust-demangle.c:774
    #148 0x6a3bd1 in demangle_path rust-demangle.c:774
    #149 0x6a3bd1 in demangle_path rust-demangle.c:774
    #150 0x6a3bd1 in demangle_path rust-demangle.c:774
    #151 0x6a3bd1 in demangle_path rust-demangle.c:774
    #152 0x6a3bd1 in demangle_path rust-demangle.c:774
    #153 0x6a3bd1 in demangle_path rust-demangle.c:774
    #154 0x6a3bd1 in demangle_path rust-demangle.c:774
    #155 0x6a3bd1 in demangle_path rust-demangle.c:774
    #156 0x6a3bd1 in demangle_path rust-demangle.c:774
    #157 0x6a3bd1 in demangle_path rust-demangle.c:774
    #158 0x6a3bd1 in demangle_path rust-demangle.c:774
    #159 0x6a3bd1 in demangle_path rust-demangle.c:774
    #160 0x6a3bd1 in demangle_path rust-demangle.c:774
    #161 0x6a3bd1 in demangle_path rust-demangle.c:774
    #162 0x6a3bd1 in demangle_path rust-demangle.c:774
    #163 0x6a3bd1 in demangle_path rust-demangle.c:774
    #164 0x6a3bd1 in demangle_path rust-demangle.c:774
    #165 0x6a3bd1 in demangle_path rust-demangle.c:774
    #166 0x6a3bd1 in demangle_path rust-demangle.c:774
    #167 0x6a3bd1 in demangle_path rust-demangle.c:774
    #168 0x6a3bd1 in demangle_path rust-demangle.c:774
    #169 0x6a3bd1 in demangle_path rust-demangle.c:774
    #170 0x6a3bd1 in demangle_path rust-demangle.c:774
    #171 0x6a3bd1 in demangle_path rust-demangle.c:774
    #172 0x6a3bd1 in demangle_path rust-demangle.c:774
    #173 0x6a3bd1 in demangle_path rust-demangle.c:774
    #174 0x6a3bd1 in demangle_path rust-demangle.c:774
    #175 0x6a3bd1 in demangle_path rust-demangle.c:774
    #176 0x6a3bd1 in demangle_path rust-demangle.c:774
    #177 0x6a3bd1 in demangle_path rust-demangle.c:774
    #178 0x6a3bd1 in demangle_path rust-demangle.c:774
    #179 0x6a3bd1 in demangle_path rust-demangle.c:774
    #180 0x6a3bd1 in demangle_path rust-demangle.c:774
    #181 0x6a3bd1 in demangle_path rust-demangle.c:774
    #182 0x6a3bd1 in demangle_path rust-demangle.c:774
    #183 0x6a3bd1 in demangle_path rust-demangle.c:774
    #184 0x6a3bd1 in demangle_path rust-demangle.c:774
    #185 0x6a3bd1 in demangle_path rust-demangle.c:774
    #186 0x6a3bd1 in demangle_path rust-demangle.c:774
    #187 0x6a3bd1 in demangle_path rust-demangle.c:774
    #188 0x6a3bd1 in demangle_path rust-demangle.c:774
    #189 0x6a3bd1 in demangle_path rust-demangle.c:774
    #190 0x6a3bd1 in demangle_path rust-demangle.c:774
    #191 0x6a3bd1 in demangle_path rust-demangle.c:774
    #192 0x6a3bd1 in demangle_path rust-demangle.c:774
    #193 0x6a3bd1 in demangle_path rust-demangle.c:774
    #194 0x6a3bd1 in demangle_path rust-demangle.c:774
    #195 0x6a3bd1 in demangle_path rust-demangle.c:774
    #196 0x6a3bd1 in demangle_path rust-demangle.c:774
    #197 0x6a3bd1 in demangle_path rust-demangle.c:774
    #198 0x6a3bd1 in demangle_path rust-demangle.c:774
    #199 0x6a3bd1 in demangle_path rust-demangle.c:774
    #200 0x6a3bd1 in demangle_path rust-demangle.c:774
    #201 0x6a3bd1 in demangle_path rust-demangle.c:774
    #202 0x6a3bd1 in demangle_path rust-demangle.c:774
    #203 0x6a3bd1 in demangle_path rust-demangle.c:774
    #204 0x6a3bd1 in demangle_path rust-demangle.c:774
    #205 0x6a3bd1 in demangle_path rust-demangle.c:774
    #206 0x6a3bd1 in demangle_path rust-demangle.c:774
    #207 0x6a3bd1 in demangle_path rust-demangle.c:774
    #208 0x6a3bd1 in demangle_path rust-demangle.c:774
    #209 0x6a3bd1 in demangle_path rust-demangle.c:774
    #210 0x6a3bd1 in demangle_path rust-demangle.c:774
    #211 0x6a3bd1 in demangle_path rust-demangle.c:774
    #212 0x6a3bd1 in demangle_path rust-demangle.c:774
    #213 0x6a3bd1 in demangle_path rust-demangle.c:774
    #214 0x6a3bd1 in demangle_path rust-demangle.c:774
    #215 0x6a3bd1 in demangle_path rust-demangle.c:774
    #216 0x6a3bd1 in demangle_path rust-demangle.c:774
    #217 0x6a3bd1 in demangle_path rust-demangle.c:774
    #218 0x6a3bd1 in demangle_path rust-demangle.c:774
    #219 0x6a3bd1 in demangle_path rust-demangle.c:774
    #220 0x6a3bd1 in demangle_path rust-demangle.c:774
    #221 0x6a3bd1 in demangle_path rust-demangle.c:774
    #222 0x6a3bd1 in demangle_path rust-demangle.c:774
    #223 0x6a3bd1 in demangle_path rust-demangle.c:774
    #224 0x6a3bd1 in demangle_path rust-demangle.c:774
    #225 0x6a3bd1 in demangle_path rust-demangle.c:774
    #226 0x6a3bd1 in demangle_path rust-demangle.c:774
    #227 0x6a3bd1 in demangle_path rust-demangle.c:774
    #228 0x6a3bd1 in demangle_path rust-demangle.c:774
    #229 0x6a3bd1 in demangle_path rust-demangle.c:774
    #230 0x6a3bd1 in demangle_path rust-demangle.c:774
    #231 0x6a3bd1 in demangle_path rust-demangle.c:774
    #232 0x6a3bd1 in demangle_path rust-demangle.c:774
    #233 0x6a3bd1 in demangle_path rust-demangle.c:774
    #234 0x6a3bd1 in demangle_path rust-demangle.c:774
    #235 0x6a3bd1 in demangle_path rust-demangle.c:774
    #236 0x6a3bd1 in demangle_path rust-demangle.c:774
    #237 0x6a3bd1 in demangle_path rust-demangle.c:774
    #238 0x6a3bd1 in demangle_path rust-demangle.c:774
    #239 0x6a3bd1 in demangle_path rust-demangle.c:774
    #240 0x6a3bd1 in demangle_path rust-demangle.c:774
    #241 0x6a3bd1 in demangle_path rust-demangle.c:774
    #242 0x6a3bd1 in demangle_path rust-demangle.c:774
    #243 0x6a3bd1 in demangle_path rust-demangle.c:774
    #244 0x6a3bd1 in demangle_path rust-demangle.c:774
    #245 0x6a3bd1 in demangle_path rust-demangle.c:774
    #246 0x6a3bd1 in demangle_path rust-demangle.c:774
    #247 0x6a3bd1 in demangle_path rust-demangle.c:774
    #248 0x6a3bd1 in demangle_path rust-demangle.c:774
    #249 0x6a3bd1 in demangle_path rust-demangle.c:774
    #250 0x6a3bd1 in demangle_path rust-demangle.c:774
    #251 0x6a3bd1 in demangle_path rust-demangle.c:774

SUMMARY: AddressSanitizer: stack-overflow rust-demangle.c:664 demangle_path

Revision history for this message
Matthias Klose (doko) wrote :

please don't submit issues like this without a reproducer.

Changed in binutils (Ubuntu):
status: New → Incomplete
Changed in binutils (Ubuntu):
status: Incomplete → Confirmed
status: Confirmed → Incomplete
description: updated
Changed in binutils (Ubuntu):
status: Incomplete → Confirmed
Revision history for this message
Jeffrey Hawkins (rtswguru) wrote :

What is the status of this CVE with Ubuntu Jammy? This was fixed in the upstream in January/February 2022, https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99935#c11

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.