public inbox for gdb-prs@sourceware.org
help / color / mirror / Atom feed
* [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case)
@ 2023-01-17 13:24 vries at gcc dot gnu.org
  2023-01-19 11:12 ` [Bug tdep/30011] " vries at gcc dot gnu.org
                   ` (3 more replies)
  0 siblings, 4 replies; 5+ messages in thread
From: vries at gcc dot gnu.org @ 2023-01-17 13:24 UTC (permalink / raw)
  To: gdb-prs

https://sourceware.org/bugzilla/show_bug.cgi?id=30011

            Bug ID: 30011
           Summary: [gdb/tdep, aarch64] Incorrect frame address for last
                    insn (leaf case)
           Product: gdb
           Version: HEAD
            Status: NEW
          Severity: normal
          Priority: P2
         Component: tdep
          Assignee: unassigned at sourceware dot org
          Reporter: vries at gcc dot gnu.org
  Target Milestone: ---

[ Spinoff from PR29721. ]

Consider the following test-case:
...
$ cat test.c
void
foo (const char *s)
{
}

int
main (void)
{
  foo ("foo");
  return 0;
}
...

Compiled without debug info:
...
$ gcc test.c
...

Disassembly of foo:
...
00000000004005e4 <foo>:
  4005e4:       d10043ff        sub     sp, sp, #0x10
  4005e8:       f90007e0        str     x0, [sp, #8]
  4005ec:       d503201f        nop
  4005f0:       910043ff        add     sp, sp, #0x10
  4005f4:       d65f03c0        ret
...

Now, let's do "info frame" at each insn in foo, as well as printing $sp and
$fp:
...
$ gdb a.out
Reading symbols from a.out...
(gdb) b *foo
Breakpoint 1 at 0x400564
(gdb) r
Starting program: a.out 

Breakpoint 1, 0x0000000000400564 in foo ()
(gdb) display /x $sp
1: /x $sp = 0xfffffffff3a0
(gdb) display /x $fp
2: /x $fp = 0xfffffffff3a0
(gdb) info frame
Stack level 0, frame at 0xfffffffff3a0:
 pc = 0x400564 in foo; saved pc = 0x40058c
 called by frame at 0xfffffffff3b0
 Arglist at 0xfffffffff3a0, args: 
 Locals at 0xfffffffff3a0, Previous frame's sp is 0xfffffffff3a0
(gdb) si
0x0000000000400568 in foo ()
1: /x $sp = 0xfffffffff390
2: /x $fp = 0xfffffffff390
(gdb) info frame
Stack level 0, frame at 0xfffffffff3a0:
 pc = 0x400568 in foo; saved pc = 0x40058c
 called by frame at 0xfffffffff3b0
 Arglist at 0xfffffffff390, args: 
 Locals at 0xfffffffff390, Previous frame's sp is 0xfffffffff3a0
(gdb) si
0x000000000040056c in foo ()
1: /x $sp = 0xfffffffff390
2: /x $fp = 0xfffffffff390
(gdb) info frame
Stack level 0, frame at 0xfffffffff3a0:
 pc = 0x40056c in foo; saved pc = 0x40058c
 called by frame at 0xfffffffff3b0
 Arglist at 0xfffffffff390, args: 
 Locals at 0xfffffffff390, Previous frame's sp is 0xfffffffff3a0
 Saved registers:
  x0 at 0xfffffffff398
(gdb) si
0x0000000000400570 in foo ()
1: /x $sp = 0xfffffffff390
2: /x $fp = 0xfffffffff390
(gdb) info frame
Stack level 0, frame at 0xfffffffff3a0:
 pc = 0x400570 in foo; saved pc = 0x40058c
 called by frame at 0xfffffffff3b0
 Arglist at 0xfffffffff390, args: 
 Locals at 0xfffffffff390, Previous frame's sp is 0xfffffffff3a0
 Saved registers:
  x0 at 0xfffffffff398
(gdb) si
0x0000000000400574 in foo ()
1: /x $sp = 0xfffffffff3a0
2: /x $fp = 0xfffffffff3a0
(gdb) info frame
Stack level 0, frame at 0xfffffffff3b0:
 pc = 0x400574 in foo; saved pc = 0x40058c
 called by frame at 0xfffffffff3b0
 Arglist at 0xfffffffff3a0, args: 
 Locals at 0xfffffffff3a0, Previous frame's sp is 0xfffffffff3b0
 Saved registers:
  x0 at 0xfffffffff3a8
(gdb) si
0x000000000040058c in main ()
1: /x $sp = 0xfffffffff3a0
2: /x $fp = 0xfffffffff3a0
...

The "frame at" bit lists 0xfffffffff3a0 except at the last insn.

The frame address is calculated here in aarch64_make_prologue_cache_1:
...
  unwound_fp = get_frame_register_unsigned (this_frame, cache->framereg);
  if (unwound_fp == 0)
    return;

  cache->prev_sp = unwound_fp + cache->framesize;
...

For insns after the prologue, we have cache->framereg == sp and
cache->framesize == 16, so unwound_fp + cache->framesize gives the wrong answer
once sp has been restored to entry value by the before-last insn.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug tdep/30011] [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case)
  2023-01-17 13:24 [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case) vries at gcc dot gnu.org
@ 2023-01-19 11:12 ` vries at gcc dot gnu.org
  2023-01-23 15:49 ` cvs-commit at gcc dot gnu.org
                   ` (2 subsequent siblings)
  3 siblings, 0 replies; 5+ messages in thread
From: vries at gcc dot gnu.org @ 2023-01-19 11:12 UTC (permalink / raw)
  To: gdb-prs

https://sourceware.org/bugzilla/show_bug.cgi?id=30011

--- Comment #1 from Tom de Vries <vries at gcc dot gnu.org> ---
Fix proposed at
https://sourceware.org/pipermail/gdb-patches/2023-January/195921.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug tdep/30011] [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case)
  2023-01-17 13:24 [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case) vries at gcc dot gnu.org
  2023-01-19 11:12 ` [Bug tdep/30011] " vries at gcc dot gnu.org
@ 2023-01-23 15:49 ` cvs-commit at gcc dot gnu.org
  2023-01-23 15:52 ` vries at gcc dot gnu.org
  2023-01-23 15:53 ` vries at gcc dot gnu.org
  3 siblings, 0 replies; 5+ messages in thread
From: cvs-commit at gcc dot gnu.org @ 2023-01-23 15:49 UTC (permalink / raw)
  To: gdb-prs

https://sourceware.org/bugzilla/show_bug.cgi?id=30011

--- Comment #2 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Tom de Vries <vries@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=29e09a42f1d1af3d97652e54b6b3cac68cf61d15

commit 29e09a42f1d1af3d97652e54b6b3cac68cf61d15
Author: Tom de Vries <tdevries@suse.de>
Date:   Mon Jan 23 16:49:36 2023 +0100

    [gdb/tdep, aarch64] Fix frame address of last insn

    Consider the test-case test.c, compiled without debug info:
    ...
    void
    foo (const char *s)
    {
    }

    int
    main (void)
    {
      foo ("foo");
      return 0;
    }
    ...

    Disassembly of foo:
    ...
    0000000000400564 <foo>:
      400564:       d10043ff        sub     sp, sp, #0x10
      400568:       f90007e0        str     x0, [sp, #8]
      40056c:       d503201f        nop
      400570:       910043ff        add     sp, sp, #0x10
      400574:       d65f03c0        ret
    ...

    Now, let's do "info frame" at each insn in foo, as well as printing $sp
    and $x29 (and strip the output of info frame to the first line, for
brevity):
    ...
    $ gdb -q a.out
    Reading symbols from a.out...
    (gdb) b *foo
    Breakpoint 1 at 0x400564
    (gdb) r
    Starting program: a.out

    Breakpoint 1, 0x0000000000400564 in foo ()
    (gdb) display /x $sp
    1: /x $sp = 0xfffffffff3a0
    (gdb) display /x $x29
    2: /x $x29 = 0xfffffffff3a0
    (gdb) info frame
    Stack level 0, frame at 0xfffffffff3a0:
    (gdb) si
    0x0000000000400568 in foo ()
    1: /x $sp = 0xfffffffff390
    2: /x $x29 = 0xfffffffff3a0
    (gdb) info frame
    Stack level 0, frame at 0xfffffffff3a0:
    (gdb) si
    0x000000000040056c in foo ()
    1: /x $sp = 0xfffffffff390
    2: /x $x29 = 0xfffffffff3a0
    (gdb) info frame
    Stack level 0, frame at 0xfffffffff3a0:
    (gdb) si
    0x0000000000400570 in foo ()
    1: /x $sp = 0xfffffffff390
    2: /x $x29 = 0xfffffffff3a0
    (gdb) info frame
    Stack level 0, frame at 0xfffffffff3a0:
    (gdb) si
    0x0000000000400574 in foo ()
    1: /x $sp = 0xfffffffff3a0
    2: /x $x29 = 0xfffffffff3a0
    (gdb) info frame
    Stack level 0, frame at 0xfffffffff3b0:
     pc = 0x400574 in foo; saved pc = 0x40058c
    (gdb) si
    0x000000000040058c in main ()
    1: /x $sp = 0xfffffffff3a0
    2: /x $x29 = 0xfffffffff3a0
    ...

    The "frame at" bit lists 0xfffffffff3a0 except at the last insn, where it
    lists 0xfffffffff3b0.

    The frame address is calculated here in aarch64_make_prologue_cache_1:
    ...
      unwound_fp = get_frame_register_unsigned (this_frame, cache->framereg);
      if (unwound_fp == 0)
        return;

      cache->prev_sp = unwound_fp + cache->framesize;
    ...

    For insns after the prologue, we have cache->framereg == sp and
    cache->framesize == 16, so unwound_fp + cache->framesize gives the wrong
    answer once sp has been restored to entry value by the before-last insn.

    Fix this by detecting the situation that the sp has been restored.

    This fixes PRs tdep/30010 and tdep/30011.

    This also fixes the aarch64 FAILs in gdb.reverse/solib-precsave.exp and
    gdb.reverse/solib-reverse.exp I reported in PR gdb/PR29721.

    Tested on aarch64-linux.
    PR tdep/30010
    PR tdep/30011
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=30010
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=30011

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug tdep/30011] [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case)
  2023-01-17 13:24 [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case) vries at gcc dot gnu.org
  2023-01-19 11:12 ` [Bug tdep/30011] " vries at gcc dot gnu.org
  2023-01-23 15:49 ` cvs-commit at gcc dot gnu.org
@ 2023-01-23 15:52 ` vries at gcc dot gnu.org
  2023-01-23 15:53 ` vries at gcc dot gnu.org
  3 siblings, 0 replies; 5+ messages in thread
From: vries at gcc dot gnu.org @ 2023-01-23 15:52 UTC (permalink / raw)
  To: gdb-prs

https://sourceware.org/bugzilla/show_bug.cgi?id=30011

Tom de Vries <vries at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |14.1

--- Comment #3 from Tom de Vries <vries at gcc dot gnu.org> ---
Fixed by commit.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 5+ messages in thread

* [Bug tdep/30011] [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case)
  2023-01-17 13:24 [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case) vries at gcc dot gnu.org
                   ` (2 preceding siblings ...)
  2023-01-23 15:52 ` vries at gcc dot gnu.org
@ 2023-01-23 15:53 ` vries at gcc dot gnu.org
  3 siblings, 0 replies; 5+ messages in thread
From: vries at gcc dot gnu.org @ 2023-01-23 15:53 UTC (permalink / raw)
  To: gdb-prs

https://sourceware.org/bugzilla/show_bug.cgi?id=30011

Tom de Vries <vries at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #4 from Tom de Vries <vries at gcc dot gnu.org> ---
(In reply to Tom de Vries from comment #3)
> Fixed by commit.

Indeed.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2023-01-23 15:53 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-01-17 13:24 [Bug tdep/30011] New: [gdb/tdep, aarch64] Incorrect frame address for last insn (leaf case) vries at gcc dot gnu.org
2023-01-19 11:12 ` [Bug tdep/30011] " vries at gcc dot gnu.org
2023-01-23 15:49 ` cvs-commit at gcc dot gnu.org
2023-01-23 15:52 ` vries at gcc dot gnu.org
2023-01-23 15:53 ` vries at gcc dot gnu.org

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).