https://bugzilla.wikimedia.org/show_bug.cgi?id=68422

--- Comment #2 from Ori Livneh <[email protected]> ---
(Documenting my baby-steps.)

I run gdb like this:

$ TRACE=bcinterp:3 HPHP_TRACE_FILE=/tmp/hphp.log gdb -ex run --args
/usr/local/bin/hhvm /srv/mediawiki/tests/parserTests.php
--file=/srv/mediawiki/68422.txt

And I see:

hhvm: /srv/hhvm-dev/hphp/runtime/base/ref-data.h:118: HPHP::Cell*
HPHP::RefData::tv(): Assertion `m_magic == Magic::kMagic' failed.

The relevant frame looks like this one:

#4  0x0000000001f76289 in HPHP::RefData::tv (this=0x7fffe8759c50) at
/srv/hhvm-dev/hphp/runtime/base/ref-data.h:118

So:

(gdb) frame 4
#4  0x0000000001f76289 in HPHP::RefData::tv (this=0x7fffe8759c50) at
/srv/hhvm-dev/hphp/runtime/base/ref-data.h:118
118        assert(m_magic == Magic::kMagic);
(gdb) p m_tv->m_data.pobj
$1 = (HPHP::ObjectData *) 0x6a6a6a6a6a6a6a6a

0x6a6a6a6a is typical of memory freed by the smart allocator, which suggests
that this is a use-after free bug.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to