From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gcc-bugs-return-473884-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Received: (qmail 350 invoked by alias); 19 Jan 2015 18:15:55 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Received: (qmail 31740 invoked by uid 48); 19 Jan 2015 18:15:44 -0000
From: "redi at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug libstdc++/64632] runtime error: member call on address 0x0000004318a8 which does not point to an object of type 'ios_base'
Date: Mon, 19 Jan 2015 18:15:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: libstdc++
X-Bugzilla-Version: 5.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: redi at gcc dot gnu.org
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields:
Message-ID: <bug-64632-4-iJ655frIpU@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-64632-4@http.gcc.gnu.org/bugzilla/>
References: <bug-64632-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2015-01/txt/msg01878.txt.bz2

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64632

--- Comment #2 from Jonathan Wakely <redi at gcc dot gnu.org> ---
This just does the same std::ios_base::_M_streambuf_state member directly
rather than through the basic_ios<char>::rdstate() member function (compile
with -fno-access-control)

#include <fstream>

int main()
{
  std::ofstream f;
  std::ios_base& base = f;
  return base._M_streambuf_state;
}

ub.cc:6:15: runtime error: member access within address 0x7fff3d4e47e8 which
does not point to an object of type 'ios_base'
0x7fff3d4e46f0: note: object is base class subobject at offset 248 within
object of type 'std::basic_ofstream<char, std::char_traits<char> >'
 00 00 00 00  f8 c2 37 36 c2 7f 00 00  40 c1 37 36 c2 7f 00 00  00 00 00 00 00
00 00 00  00 00 00 00
              ^ 

I don't see how this can possibly go wrong ... it just accesses a member of a
base class.  It makes no difference if you don't use the reference to base:

  std::ofstream f;
  return f._M_streambuf_state;

Or use a pointer instead of reference:

  std::ofstream f;
  std::ios_base* base = &f;
  return base->_M_streambuf_state;

I don't think this is a libstdc++ issue.