* [Bug translator/7000] New: printf %n specifier causes segfault
@ 2008-10-31 21:09 ebaron at redhat dot com
2008-10-31 21:12 ` [Bug translator/7000] " ebaron at redhat dot com
` (4 more replies)
0 siblings, 5 replies; 6+ messages in thread
From: ebaron at redhat dot com @ 2008-10-31 21:09 UTC (permalink / raw)
To: systemtap
Steps to reproduce:
1. stap -e 'probe begin{printf("%1n%b\n",2);exit()}'
--
Summary: printf %n specifier causes segfault
Product: systemtap
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: translator
AssignedTo: systemtap at sources dot redhat dot com
ReportedBy: ebaron at redhat dot com
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread* [Bug translator/7000] printf %n specifier causes segfault
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
@ 2008-10-31 21:12 ` ebaron at redhat dot com
2008-11-10 8:56 ` ananth at in dot ibm dot com
` (3 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: ebaron at redhat dot com @ 2008-10-31 21:12 UTC (permalink / raw)
To: systemtap
------- Additional Comments From ebaron at redhat dot com 2008-10-31 21:11 -------
Created an attachment (id=3039)
--> (http://sourceware.org/bugzilla/attachment.cgi?id=3039&action=view)
Results of stap-report
--
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread* [Bug translator/7000] printf %n specifier causes segfault
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
2008-10-31 21:12 ` [Bug translator/7000] " ebaron at redhat dot com
@ 2008-11-10 8:56 ` ananth at in dot ibm dot com
2008-11-13 8:56 ` wenji dot huang at oracle dot com
` (2 subsequent siblings)
4 siblings, 0 replies; 6+ messages in thread
From: ananth at in dot ibm dot com @ 2008-11-10 8:56 UTC (permalink / raw)
To: systemtap
------- Additional Comments From ananth at in dot ibm dot com 2008-11-10 08:55 -------
*** Bug 7015 has been marked as a duplicate of this bug. ***
--
What |Removed |Added
----------------------------------------------------------------------------
CC| |ananth at in dot ibm dot com
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread* [Bug translator/7000] printf %n specifier causes segfault
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
2008-10-31 21:12 ` [Bug translator/7000] " ebaron at redhat dot com
2008-11-10 8:56 ` ananth at in dot ibm dot com
@ 2008-11-13 8:56 ` wenji dot huang at oracle dot com
2008-11-14 3:08 ` wenji dot huang at oracle dot com
2008-12-05 18:45 ` ebaron at redhat dot com
4 siblings, 0 replies; 6+ messages in thread
From: wenji dot huang at oracle dot com @ 2008-11-13 8:56 UTC (permalink / raw)
To: systemtap
------- Additional Comments From wenji dot huang at oracle dot com 2008-11-13 08:54 -------
Lack of checking bound in c_unparser::visit_print_format will cause the segment
fault. Seems this patch can avoid that.
diff --git a/translate.cxx b/translate.cxx
index 4112855..741455e 100644
--- a/translate.cxx
+++ b/translate.cxx
@@ -4199,7 +4199,7 @@ c_unparser::visit_print_format (print_format* e)
/* The type of the %c argument is 'int'. */
else if (components[i].type == print_format::conv_char)
o->line() << ", (int)" << tmp[arg_ix++].value();
- else
+ else if (arg_ix < (int) tmp.size())
o->line() << ", " << tmp[arg_ix++].value();
}
--
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread* [Bug translator/7000] printf %n specifier causes segfault
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
` (2 preceding siblings ...)
2008-11-13 8:56 ` wenji dot huang at oracle dot com
@ 2008-11-14 3:08 ` wenji dot huang at oracle dot com
2008-12-05 18:45 ` ebaron at redhat dot com
4 siblings, 0 replies; 6+ messages in thread
From: wenji dot huang at oracle dot com @ 2008-11-14 3:08 UTC (permalink / raw)
To: systemtap
------- Additional Comments From wenji dot huang at oracle dot com 2008-11-14 03:04 -------
See commit 1f5490d125bdb76179724ddd989569734235d185.
--
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread* [Bug translator/7000] printf %n specifier causes segfault
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
` (3 preceding siblings ...)
2008-11-14 3:08 ` wenji dot huang at oracle dot com
@ 2008-12-05 18:45 ` ebaron at redhat dot com
4 siblings, 0 replies; 6+ messages in thread
From: ebaron at redhat dot com @ 2008-12-05 18:45 UTC (permalink / raw)
To: systemtap
------- Additional Comments From ebaron at redhat dot com 2008-12-05 18:42 -------
Decision in 7051 to remove %n
--
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
http://sourceware.org/bugzilla/show_bug.cgi?id=7000
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2008-12-05 18:45 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-10-31 21:09 [Bug translator/7000] New: printf %n specifier causes segfault ebaron at redhat dot com
2008-10-31 21:12 ` [Bug translator/7000] " ebaron at redhat dot com
2008-11-10 8:56 ` ananth at in dot ibm dot com
2008-11-13 8:56 ` wenji dot huang at oracle dot com
2008-11-14 3:08 ` wenji dot huang at oracle dot com
2008-12-05 18:45 ` ebaron at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).