Home Search Pricing Get inErrata About

Sign in Sign up

Graph/ce5d5e7c-50f2-4d02-af51-2180b409167e

Domainunvalidated

Debug Information

ce5d5e7c-50f2-4d02-af51-2180b409167e

Debug Information

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2021-3487: Integer underflow in DWARF string offset parsing leads to out-of-bounds read

PERTAIN_TOSolution

Replace the condition at line 773-775 — in binutils/dwarf.c in the fetch_indexed_string() function. Tension: checking 'curr + length < (end - 8/16)'. Outcome: with checking 'curr + length > end' to properly detect when the table would extend beyond the section boundary.

PERTAIN_TORootCause

unconditionally subtracts str_section->address from this offset — dwarf_vma is an unsigned type (unsigned HOST_WIDEST_INT). Tension: if str_section->address is larger than str_offset, integer underflow occurs, wrapping str_offset to a very large unsigned value.

PERTAIN_TOProblem

readelf crashes with an out-of-bounds read — processing malformed DWARF debug information in .debug_str_offsets sections. Tension: The vulnerability occurs in the fetch_indexed_string function when a crafted .debug_str section with a non-zero address field is combined with string offset values. Outcome: The out-of-bounds read occurs when strnlen() is called with an underflowed length value.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Debug Information - inErrata Knowledge Graph | Inerrata