http://gcc.gnu.org/bugzilla/show_bug.cgi?id=55505



             Bug #: 55505

           Summary: gcc.c-torture/execute/921202-1.c execution failures

                    with -fsanitize=address

    Classification: Unclassified

           Product: gcc

           Version: 4.8.0

            Status: UNCONFIRMED

          Severity: normal

          Priority: P3

         Component: sanitizer

        AssignedTo: unassig...@gcc.gnu.org

        ReportedBy: howa...@nitro.med.uc.edu

                CC: do...@gcc.gnu.org, dvyu...@gcc.gnu.org,

                    ja...@gcc.gnu.org, k...@gcc.gnu.org





Using...



make -k check-gcc RUNTESTFLAGS="--target_board=unix'{-fsanitize=address}'"



on x86_64-apple-darwin12 produces execution failures in...



FAIL: gcc.c-torture/execute/921202-1.c execution,  -O0 

FAIL: gcc.c-torture/execute/921202-1.c execution,  -Og -g 



which are of the form...



Executing on host: /sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/xgcc

-B/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/

/sw/src/fink.build/gcc48-4.8.0-1000/gcc-4.8-20121127/gcc/testsuite/gcc.c-torture/execute/921202-1.c

 -fno-diagnostics-show-caret  -w  -O0   -lm   -fsanitize=address -o

/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/921202-1.x0

   (timeout = 300)

PASS: gcc.c-torture/execute/921202-1.c compilation,  -O0

Setting LD_LIBRARY_PATH to

:/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc::/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc

=================================================================

==51205== ERROR: AddressSanitizer: stack-buffer-overflow on address

0x7fff552f9a38 at pc 0x10a8ffc42 bp 0x7fff552f1950 sp 0x7fff552f1948

WRITE of size 8 at 0x7fff552f9a38 thread T0

    #0 0x10a8ffc41

(/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/921202-1.x0+0x100000c41)

    #1 0x7fff8bd827e0 (/usr/lib/system/libdyld.dylib+0x27e0)

    #2 0x0

Address 0x7fff552f9a38 is located at offset 32952 in frame <main> of T0's

stack:

  This frame has 3 object(s):

    [32, 16472) 'dx'

    [16512, 32952) 'dy'

    [32992, 49432) 's1'

HINT: this may be a false positive if your program uses some custom stack

unwind mechanism or swapcontext

      (longjmp and C++ exceptions *are* supported)

Shadow byte and word:

  0x1fffeaa5f347: f4

  0x1fffeaa5f340: 00 00 00 00 00 00 00 f4

More shadow bytes:

  0x1fffeaa5f320: 00 00 00 00 00 00 00 00

  0x1fffeaa5f328: 00 00 00 00 00 00 00 00

  0x1fffeaa5f330: 00 00 00 00 00 00 00 00

  0x1fffeaa5f338: 00 00 00 00 00 00 00 00

=>0x1fffeaa5f340: 00 00 00 00 00 00 00 f4

  0x1fffeaa5f348: f2 f2 f2 f2 00 00 00 00

  0x1fffeaa5f350: 00 00 00 00 00 00 00 00

  0x1fffeaa5f358: 00 00 00 00 00 00 00 00

  0x1fffeaa5f360: 00 00 00 00 00 00 00 00

Stats: 0M malloced (0M for red zones) by 0 calls

Stats: 0M realloced by 0 calls

Stats: 0M freed by 0 calls

Stats: 0M really freed by 0 calls



Stats: 0M (0 full pages) mmaped in 0 calls

  mmaps   by size class:

  mallocs by size class:

  frees   by size class:

  rfrees  by size class:

Stats: malloc large: 0 small slow: 0

==51205== ABORTING

FAIL: gcc.c-torture/execute/921202-1.c execution,  -O0

Reply via email to