<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/86280>86280</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            potential out-of-bounds in llvm-objdump in OffloadBinary::create()
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            tools:llvm-objdump,
            crash-on-invalid
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          emaste
      </td>
    </tr>
</table>

<pre>
    Reported against FreeBSD in https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277862 with an attached reproducer
```
# objdump --version
LLVM (http://llvm.org/):
  LLVM version 17.0.6
  Optimized build with assertions.
...
# objdump -s objdump1c.exe
PLEASE submit a bug report to https://bugs.freebsd.org/submit/ and include the crash backtrace.
Stack dump:
0.      Program arguments: objdump -s objdump1c.exe
 #0 0x0000000001230c41 PrintStackTrace /usr/src/contrib/llvm-project/llvm/lib/Support/Unix/Signals.inc:602:13
 #1 0x000000000122f0b5 RunSignalHandlers /usr/src/contrib/llvm-project/llvm/lib/Support/Signals.cpp:105:18
 #2 0x0000000001231365 SignalHandler /usr/src/contrib/llvm-project/llvm/lib/Support/Unix/Signals.inc:0:3
 #3 0x0000000824b055ff handle_signal /usr/src/lib/libthr/thread/thr_sig.c:0:3
 #4 0x0000000824b04bbb thr_sighandler /usr/src/lib/libthr/thread/thr_sig.c:244:1
 #5 0x00000008225332d3 ([vdso]+0x2d3)
 #6 0x0000000001174709 create /usr/src/contrib/llvm-project/llvm/lib/Object/OffloadBinary.cpp:199:29
 #7 0x0000000000f7e328 createBinary /usr/src/contrib/llvm-project/llvm/lib/Object/Binary.cpp:0:12
 #8 0x0000000000f7e42a operator bool /usr/src/contrib/llvm-project/llvm/include/llvm/Support/Error.h:559:17
 #9 0x0000000000f7e42a createBinary /usr/src/contrib/llvm-project/llvm/lib/Object/Binary.cpp:113:8
#10 0x0000000000e65321 operator bool /usr/src/contrib/llvm-project/llvm/include/llvm/Support/Error.h:559:17
#11 0x0000000000e65321 unwrapOrError<llvm::object::OwningBinary<llvm::object::Binary>, llvm::StringRef &> /usr/src/contrib/llvm-project/llvm/tools/llvm-objdump/llvm-objdump.h:126:7
#12 0x0000000000e65321 dumpInput /usr/src/contrib/llvm-project/llvm/tools/llvm-objdump/llvm-objdump.cpp:2913:34
#13 0x0000000000e65321 for_each<std::__1::__wrap_iter<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > *>, void (*)(llvm::StringRef)> /usr/obj/usr/src/amd64.amd64/tmp/usr/include/c++/v1/__algorithm/for_each.h:26:5
#14 0x0000000000e65321 for_each<std::__1::vector<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::allocator<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > > > &, void (*)(llvm::StringRef)> /usr/src/contrib/llvm-project/llvm/include/llvm/ADT/STLExtras.h:1731:10
#15 0x0000000000e65321 main /usr/src/contrib/llvm-project/llvm/tools/llvm-objdump/llvm-objdump.cpp:3248:3
#16 0x00000008281480aa __libc_start1 /usr/src/lib/libc/csu/libc_start1.c:157:2
Segmentation fault (core dumped)
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzEV01v27oS_TX0hohADiVZWnihfBjvAXlI0fTdrUGRtMRWFg2SStL--gtSsmWnLnLbIreB4Yjk0OfMmeFoyJ3TTa_UCmXXKLtd8MG3xq7UjjuvFrWRX1cf1d5YryTmDde983htlbp-vMW6x633e4dYhWCNYF0PjUu2VqnaycTYZpz6pruOI1i71jxv6qFJRKMRW2uJ2C0sl0UO-Fn7FvMec--5aJXEVu2tkYNQFpFbRCqUk-kzDoFhU3-Ww26Pr66elHXa9OPS_f1f_8MIisDsSKzrnnYTIQRlmI62GEfraT-my4Qk-WHpYe_1Tn9TEteD7uTE0TllvTa9S0a7JEkuUHKHRyoS9aJGiw_3d9XjHXZDvdMec1wPTfDTWI-9eVvJcR-CNea9xLoX3SAV9q3CwnLX4pqLL95yoSZCj56LLziQOPpLEhz_PljTWL7D3DbDTvU-4L5BHiNgBJMXcvijwIhIKf5gde8j1qcAjhGsB2cDXysQrIXpvdX1FIOrvTWflfDTMPyLa4_DPuiAYP3_Xr-ECd30vHOJ7gViVU4AsYqymQo9pwJbUmf449CP-_7De9kp636XzIGF2AcNKcnCdzGzgFeCUJZn-IzCu8hBEKtOtGAziwLSmmTZdovbiL9xceNrFiNKp2vfhknfWsXl-BB2JBdA0lcgaV3XeLJvL_v6T1AgTYOmM052igMZYyBZOM4ou36SzqDsFsE1eQHJwkE-bsvPIkGX6ZKUWFjF_S9m5EM9zT5st53h8lr33H49ZEIZasgp_vIUn2yXikEx4Y87f5PFGXwIDYUZvHgNngLHZq8s98bi2pjvEuAt9Km6zBNzRt5Za2zSIlZlWVCBLmci5SUi76UCpQyxqjhWX3pWnojKMwb0X5chEKGXiAz9s-X7Bxs3InYTf5FViFVmdC8-Pzz3um9GP39odFi-Q3CDZ5NHb3XffFRbjCBH7O5nvfXGdO6wOr0CXg2jwzT8enXiL1zyN5j_t98P_j1ojBkAZUwBls5U2CUqW2M3iosWsRvn5SjWZkMPDyEuG-2Vvbhec6fFxkVtEbsRLbdB9u8Nw8rGW67D63S0GyP0vSnvOiNCVs6GeAxYNe15MlrGsgdVqHNQXAhz7GROomzqz6-k5juZp0n8DsJGHcf1ObMFguv4WT9RBOvNhneNsdq3IRYH5WLcY9izWev0p7V-UmJ0-o_K_LbxH86CYzbkv5oKv1jeqttPoch9ur978Za78bQvGY3Nzxz47FLgd1z373fUGaTF3JAEEvlpo1DQtCCc482m03WIE7ee_rAfidTcMA0m69iO0GwZEn1qoFUTmmMe2n285UMXSlkhjFWxuCl57ECOt5OFXDFZspIv1IouKaUUypwt2hVkOSnyVGWlzElRiOU2V7AkMq0FQJnLhV4BgZQwAMpICTQRBbBS0GKbQ12UvEYpUTuuu-Rwl1lo5wa1KnIoyKLjtepcvMQBjLKy6lxWQHCDAOJl4cr0V7p_4p2WYSG7XdhVtA73DpSSTjvvZiSvfadWe-NV7zXvsBn8ldle1WbopQvXwFOkMD5rmqaDEduAmMflYrDd6vzC02jfDnUizO7k7X-eNNHfkC7R5b8DAAD__0EqdiQ">