BinUtils Denial-of-Service Vulnerability in PE File Handling

A denial-of-service vulnerability has been identified in BinUtils version 2.26. The issue arises in the 'd_print_comp_inner' function within 'cp-demangle.c', where attackers can cause a segmentation fault by using a crafted Portable Executable (PE) file. This vulnerability was discovered while the software was compiled with Clang 12.0.1 and AddressSanitizer enabled, which revealed the memory access error caused by the exploitation.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing a crash of the 'cxxfilt' command-line tool.

Reproduction

The vulnerability can be reproduced by compiling BinUtils 2.26 with Clang 12.0.1, using AddressSanitizer to detect memory errors. After compiling, the 'cxxfilt' tool can be used to demangle C++ symbols. When a crafted PE file is piped into 'cxxfilt', the vulnerability is triggered, causing a segmentation fault.