malformed e_phnum value leads to OOB read

[elfmaster]

malformed e_phnum value leads to OOB read

[echel0nn]

The reason why sanity check do not working for these binaries and their phdr values can be explained by these;
1.bin example has these values

pwndbg> print obj->ehdr64->e_phoff 
   $5 = 0
// obj->ehdr64->e_phnum greater than 0
// obj->type is ET_EXEC

if (obj->ehdr64->e_phnum > 0 && obj->ehdr64->e_phoff > 0)
It means that ELF_PHDRS_F flag is never set, and unsafe phdr values are never checked here
if (elf_flags(obj, ELF_PHDRS_F) == true && elf_type(obj) != ET_REL)
For 2.bin and 3.bin the ELF_PHDRS_F flag is set, binaries are type of ET_REL, so unsafe phdr values are never checked.
Problems can be solved by removing comparing e_phoff against zero and object's type against ET_REL. However, i couldn't check yet whether there will be side effects other than redundancy in some cases.