Does this help:

I've compiled with sanitize:
CC='clang -g -fsanitize=address -fno-omit-frame-pointer -fsanitize-recover=address' jplatform=linux j64x=j64avx2 make2/build_all.sh


$ USE_OPENMPI=2 ASAN_OPTIONS=halt_on_error=0 ./jlibrary/bin/jconsole
[various complaints starting up]
.......
   0j30 ": (*%) 11 c. 665142606648569600281099799288x
=================================================================
==136587==ERROR: AddressSanitizer: global-buffer-overflow on address 0x7eff18c54180 at pc 0x7eff18611c52 bp 0x7ffc21b2e3f0 sp 0x7ffc21b2e3e8
READ of size 8 at 0x7eff18c54180 thread T0
#0 0x7eff18611c51 in mvc /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/u.c:345:8 #1 0x7eff18571535 in jtfmte /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:224:94 #2 0x7eff18571535 in jtfmt1 /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:244:13 #3 0x7eff1856d943 in jtth2a /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:287:3 #4 0x7eff1856d943 in jtthorn2 /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:390:3 #5 0x7eff185c964f in jtparsea /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/p.c:751:10 #6 0x7eff185c817b in jtparse /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/p.c:290:4 #7 0x7eff185d6afb in jtimmex /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/px.c:54:28 #8 0x7eff1858f47c in jtimmexexecct /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/io.c:386:2 #9 0x7eff1858f47c in jdo /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/io.c:422:111 #10 0x7eff1858ee62 in JDo /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/io.c:527:9 #11 0x563c3aa02bff in main /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/jconsole.c:393:28 #12 0x7eff1fe286c9 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #13 0x7eff1fe28784 in __libc_start_main csu/../csu/libc-start.c:360:3
#14 0x563c3a92b440 in _start (/home/wheagy/git/jsource/jlibrary/bin/jconsole+0x23440) (BuildId: 5cef6dfdd9af34a072711de8a792780461088bc1)

0x7eff18c54180 is located 32 bytes before global variable '.str.13' defined in '/home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:104' (0x7eff18c541a0) of size 2
  '.str.13' is ascii string '*'
0x7eff18c54182 is located 0 bytes after global variable '.str.12' defined in '/home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/f2.c:98' (0x7eff18c54180) of size 2
  '.str.12' is ascii string '0'
SUMMARY: AddressSanitizer: global-buffer-overflow /home/wheagy/git/jsource/make2/obj/linux/j64avx2/../../../../jsrc/u.c:345:8 in mvc
Shadow bytes around the buggy address:
  0x7eff18c53f00: 00 00 00 02 f9 f9 f9 f9 00 00 00 00 00 00 00 00
  0x7eff18c53f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7eff18c54000: 00 05 f9 f9 00 07 f9 f9 00 06 f9 f9 04 f9 f9 f9
  0x7eff18c54080: 03 f9 f9 f9 02 f9 f9 f9 04 f9 f9 f9 03 f9 f9 f9
  0x7eff18c54100: 05 f9 f9 f9 04 f9 f9 f9 03 f9 f9 f9 02 f9 f9 f9
=>0x7eff18c54180:[02]f9 f9 f9 02 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9
  0x7eff18c54200: 00 00 06 f9 f9 f9 f9 f9 03 f9 f9 f9 00 00 00 00
  0x7eff18c54280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7eff18c54300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7eff18c54380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7eff18c54400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
1.000000000000000000000000000000


On 11/24/23 21:41, Raul Miller wrote:
So... near as I can tell, the problem occurs inside plusXX which
resides between jtva2 and jtxplus.

Specifically, an audittstack in jtva2 like this:
{if(MEMAUDIT&2)audittstack(jt);}
         {I lrc=((AHDR2FN*)aadocv->f)(n,m,av,wv,zv,jt);    // run one
section.  Result of 0 means error
{if(MEMAUDIT&2)audittstack(jt);}

and in jtplusx like this:

XF2(jtxplus){ // a+w
{if(MEMAUDIT&2)audittstack(jt);}

gives me a segfault with a stack trace on that first line of jtxplus,
with plusXX between jtva2 and jtxplus, and of course with the above
lrc= line on the stack for jtva2 (but only after the 150 seconds of
scripting to trigger the problem).

----------------------------------------------------------------------
For information about J forums see http://www.jsoftware.com/forums.htm

Reply via email to