[Bug default/26872] New: crash in dynamic_cast when examining libmozjs

[Bug default/26872] New: crash in dynamic_cast when examining libmozjs

[woodard at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26872

            Bug ID: 26872
           Summary: crash in dynamic_cast when examining libmozjs
           Product: libabigail
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: default
          Assignee: dodji at redhat dot com
          Reporter: woodard at redhat dot com
                CC: libabigail at sourceware dot org
  Target Milestone: ---

Starting program: /home/ben/Scratch/Work/test/libabigail-x86_64/bin/abidw
--abidiff /lib64/libmozjs-68.so.0.0.0
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
__cxxabiv1::__dynamic_cast (src_ptr=0xb1fe54ff, src_type=0x7ffff7fb5058
<typeinfo for abigail::ir::decl_base>, dst_type=0x7ffff7fb5310 <typeinfo for
abigail::ir::var_decl>, src2dst=-1) at
../../../../libstdc++-v3/libsupc++/dyncast.cc:55
55            adjust_pointer <void> (src_ptr, prefix->whole_object);
#0  __cxxabiv1::__dynamic_cast (src_ptr=0xb1fe54ff, src_type=0x7ffff7fb5058
<typeinfo for abigail::ir::decl_base>, dst_type=0x7ffff7fb5310 <typeinfo for
abigail::ir::var_decl>, src2dst=-1) at
../../../../libstdc++-v3/libsupc++/dyncast.cc:55
#1  0x00007ffff7d9b621 in abigail::ir::var_decl::operator== (this=0x383f7580,
o=...) at ../../../libabigail/src/abg-ir.cc:16205
#2  0x00007ffff7e2bd22 in
abigail::diff_utils::deep_ptr_eq_functor::operator()<abigail::ir::var_decl>
(this=<optimized out>, second=<optimized out>, first=<optimized out>) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:772
#3  abigail::diff_utils::deep_ptr_eq_functor::operator()<abigail::ir::var_decl>
(this=<synthetic pointer>, second=<optimized out>, first=<optimized out>) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:763
#4 
abigail::diff_utils::end_of_frr_d_path_in_k_plus_delta<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (k=k@entry=7, d=d@entry=7,
a_begin=..., a_begin@entry=0x3e212e30, a_end=..., a_end@entry=0x10008,
b_begin=b_begin@entry=0x94ac7240, b_end=..., b_end@entry=0xb51e2c50, v=...,
snak=...) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1049
#5  0x00007ffff7e2c222 in
abigail::diff_utils::compute_middle_snake<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (a_begin=a_begin@entry=0x3e212e30,
a_end=..., a_end@entry=0x10008, b_begin=..., b_begin@entry=0x94ac7240,
b_end=..., b_end@entry=0xb51e2c50, snak=...,
ses_len=ses_len@entry=@0x7fffffffd8dc: 0) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1234
#6  0x00007ffff7e46adb in
abigail::diff_utils::compute_diff<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (a_base=..., a_begin=0x3e212e30,
a_end=a_end@entry=0x10008, b_base=..., b_base@entry=0x94ac7240, b_begin=...,
b_begin@entry=0x94ac7240, b_end=b_end@entry=0xb51e2c50, lcs=std::vector of
length 0, capacity 0, ses=..., ses_len=@0x7fffffffda60: 0) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1543
#7  0x00007ffff7e1133d in
abigail::diff_utils::compute_diff<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (ses=..., lcs=std::vector of length
0, capacity 0, b_end=..., b_begin=..., b_base=..., a_end=..., a_begin=...,
a_base=...) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1778
#8 
abigail::diff_utils::compute_diff<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (ses=..., b_end=0xb51e2c50,
b_begin=0x94ac7240, b_base=0x94ac7240, a_end=0x10008, a_begin=..., a_base=...)
at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1934
#9 
abigail::diff_utils::compute_diff<__gnu_cxx::__normal_iterator<abigail::ir::var_decl*
const*, std::vector<abigail::ir::var_decl*,
std::allocator<abigail::ir::var_decl*> > >,
abigail::diff_utils::deep_ptr_eq_functor> (ses=..., b_end=0xb51e2c50,
b_begin=0x94ac7240, a_end=0x10008, a_begin=...) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:1981
#10 abigail::comparison::compute_diff (f=std::shared_ptr<abigail::ir::corpus>
(use count 3, weak count 0) = {...}, s=std::shared_ptr<abigail::ir::corpus>
(use count 3, weak count 0) = {...},
ctxt=std::shared_ptr<abigail::comparison::diff_context> (use count 2, weak
count 1) = {...}) at ../../../libabigail/src/abg-comparison.cc:11084
#11 0x0000000000406443 in load_corpus_and_write_abixml (opts=...,
context=std::shared_ptr<abigail::dwarf_reader::read_context> (empty) = {...},
env=std::shared_ptr<abigail::ir::environment> (use count 1, weak count 0) =
{...}, argv=0x7fffffffe068) at ../../../libabigail/tools/abidw.cc:590
#12 main (argc=<optimized out>, argv=0x7fffffffe068) at
../../../libabigail/tools/abidw.cc:866
[ben@alien test]$ rpm -qf 
rpm: no arguments given for query
[ben@alien test]$ rpm -qf /lib64/libmozjs-68.so.0.0.0
mozjs68-68.12.0-1.fc33.x86_64

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug default/26872] crash in dynamic_cast when examining libmozjs

[woodard at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26872

--- Comment #1 from Ben Woodard <woodard at redhat dot com> ---
This might be related to 26782 because of the way the backtrace goes through 

abigail::diff_utils::deep_ptr_eq_functor::operator()<abigail::ir::var_decl>
(this=<synthetic pointer>, second=<optimized out>, first=<optimized out>) at
/home/ben/Scratch/Work/build/libabigail-x86_64/../../libabigail/include/abg-diff-utils.h:763

But it looked different enough I decided to file a separate bug. I wouldn't be
surprised if they were the same thing though.

This was with the latest trunk as of commit
2cc1ab7ee879da20688c4a72ec93c73123d7b9aa

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug default/26872] crash in dynamic_cast when examining libmozjs

[woodard at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26872

--- Comment #2 from Ben Woodard <woodard at redhat dot com> ---
It also affects /lib64/libmozjs-78.so.0.0.0 from mozjs78-78.4.0-1.fc33.x86_64

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug default/26872] crash in dynamic_cast when examining libmozjs

[dodji at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=26872

dodji at redhat dot com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from dodji at redhat dot com ---
This now works for me with the current master which tip commit is:

2417efb2 dwarf-reader: Bug 26908 - don't crash on empty DW_TAG_partial_unit

Thanks for reporting this!

-- 
You are receiving this mail because:
You are on the CC list for the bug.