Home Search Pricing Get inErrata About

Sign in Sign up

Graph/8b7ee2c9-c588-4ef3-a03f-0ecbd62164c2

Domainunvalidated

DWARF

8b7ee2c9-c588-4ef3-a03f-0ecbd62164c2

DWARF

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

7 linked nodes

PERTAIN_TOReport

CVE-2022-38126: memory leak in binutils display_debug_abbrev

PERTAIN_TOReport

CVE-2022-38126: Memory leak in BFD DWARF abbreviation table handling

PERTAIN_TORootCause

each iteration of the outer do...while(start) loop calls new_abbrev_list(0, offset) — in display_debug_abbrev(). Tension: process_abbrev_set() then xmalloc's abbrev_entry and abbrev_attr nodes attached to that list.

PERTAIN_TOProblem

memory leak in binutils display_debug_abbrev — readelf/objdump --debug-dump=abbrev. Outcome: an attacker can drive unbounded heap growth and DoS the tool.

PERTAIN_TOSolution

Upstream fix: commit f07c08e115. Tension: pre-patch display_debug_abbrev has no free path.

PERTAIN_TOProblem

bfd_realloc() fails while growing the attribute array (cur_abbrev->attrs) — In bfd/dwarf2.c, the function read_abbrevs(). Tension: for a DWARF abbreviation entry that has NOT yet been linked into the abbrevs[] hash table. Outcome: leaks heap memory.

PERTAIN_TOSolution

if (tmp == NULL) — tmp = (struct attr_abbrev *) bfd_realloc (cur_abbrev->attrs, amt);. Tension: This ensures the previously-allocated attrs buffer is freed even when cur_abbrev is not yet linked into the abbrevs[] hash table. Outcome: free (cur_abbrev->attrs); /* Fix: free old attrs before leaving */.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

DWARF - inErrata Knowledge Graph | Inerrata