public inbox for gdb-cvs@sourceware.org
help / color / mirror / Atom feed
* [binutils-gdb] gdb: Fix regression in varobj recreation
@ 2022-08-03  9:00 Lancelot SIX
  0 siblings, 0 replies; only message in thread
From: Lancelot SIX @ 2022-08-03  9:00 UTC (permalink / raw)
  To: gdb-cvs

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f74a5e6f2ed5180ce28d6478a6d7a7a1982c5d43

commit f74a5e6f2ed5180ce28d6478a6d7a7a1982c5d43
Author: Lancelot SIX <lancelot.six@amd.com>
Date:   Tue Aug 2 13:14:20 2022 +0100

    gdb: Fix regression in varobj recreation
    
    Commit bc20e562ec0 "Fix use after free in varobj" introduced a
    regression.  This commit makes sure that the varobj object does not
    keeps stale references to object being freed when we unload an objfile.
    This includes the "valid_block" field which is reset to nullptr if the
    pointed to block is tied to an objfile being freed.
    
    However, at some point varobj_invalidate_iter might try to recreate
    varobjs tracking either floating or globals.  Varobj tracking globals
    are identified as having the "valid_block" field set nullptr, but as
    bc20e562ec0 might clear this field, we have lost the ability to
    distinguish between varobj referring to globals and non globals.
    
    Fix this by introducing a "global" flag which tracks if a given varobj
    was initially created as tracking a global.
    
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=29426

Diff:
---
 gdb/varobj.c | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/gdb/varobj.c b/gdb/varobj.c
index e558794617a..0683af1991e 100644
--- a/gdb/varobj.c
+++ b/gdb/varobj.c
@@ -102,6 +102,9 @@ struct varobj_root
      to symbols that do not exist anymore.  */
   bool is_valid = true;
 
+  /* Set to true if the varobj was created as tracking a global.  */
+  bool global = false;
+
   /* Language-related operations for this variable and its
      children.  */
   const struct lang_varobj_ops *lang_ops = NULL;
@@ -336,6 +339,8 @@ varobj_create (const char *objname,
       var->format = variable_default_display (var.get ());
       var->root->valid_block =
 	var->root->floating ? NULL : tracker.block ();
+      var->root->global
+	= var->root->floating ? false : var->root->valid_block == nullptr;
       var->name = expression;
       /* For a root var, the name and the expr are the same.  */
       var->path_expr = expression;
@@ -2359,7 +2364,7 @@ static void
 varobj_invalidate_iter (struct varobj *var)
 {
   /* global and floating var must be re-evaluated.  */
-  if (var->root->floating || var->root->valid_block == nullptr)
+  if (var->root->floating || var->root->global)
     {
       struct varobj *tmp_var;
 
@@ -2375,7 +2380,7 @@ varobj_invalidate_iter (struct varobj *var)
 	  varobj_delete (var, 0);
 	  install_variable (tmp_var);
 	}
-      else if (!var->root->floating)
+      else if (var->root->global)
 	{
 	  /* Only invalidate globals as floating vars might still be valid in
 	     some other frame.  */


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2022-08-03  9:00 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-08-03  9:00 [binutils-gdb] gdb: Fix regression in varobj recreation Lancelot SIX

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).