* [Bug runtime/13289] New: %m/%M printf formatting operators access memory incorrectly
@ 2011-10-12 21:52 dsmith at redhat dot com
2011-10-12 21:53 ` [Bug runtime/13289] " dsmith at redhat dot com
2011-10-13 21:26 ` dsmith at redhat dot com
0 siblings, 2 replies; 3+ messages in thread
From: dsmith at redhat dot com @ 2011-10-12 21:52 UTC (permalink / raw)
To: systemtap
http://sourceware.org/bugzilla/show_bug.cgi?id=13289
Bug #: 13289
Summary: %m/%M printf formatting operators access memory
incorrectly
Product: systemtap
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: runtime
AssignedTo: systemtap@sourceware.org
ReportedBy: dsmith@redhat.com
Classification: Unclassified
While working on bug #12341 on s390x, I found that running the memory1.exp test
would crash the system. After lots of debugging, I found that the %m/%M printf
formatting operators were accessing memory incorrectly.
When the %m/%M formatting operators are used, translate.cxx emits code that
uses deref_buffer() to validate whether the memory used at the address can be
accessed safely. If the works, the code in _stp_vsnprintf() actually reads the
memory to put in the output buffer. However, the _stp_vsnprintf() code
accesses the memory directly, instead of using deref().
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug runtime/13289] %m/%M printf formatting operators access memory incorrectly
2011-10-12 21:52 [Bug runtime/13289] New: %m/%M printf formatting operators access memory incorrectly dsmith at redhat dot com
@ 2011-10-12 21:53 ` dsmith at redhat dot com
2011-10-13 21:26 ` dsmith at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: dsmith at redhat dot com @ 2011-10-12 21:53 UTC (permalink / raw)
To: systemtap
http://sourceware.org/bugzilla/show_bug.cgi?id=13289
David Smith <dsmith at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED
--- Comment #1 from David Smith <dsmith at redhat dot com> 2011-10-12 21:53:33 UTC ---
Fixed in commit bcc1790.
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
* [Bug runtime/13289] %m/%M printf formatting operators access memory incorrectly
2011-10-12 21:52 [Bug runtime/13289] New: %m/%M printf formatting operators access memory incorrectly dsmith at redhat dot com
2011-10-12 21:53 ` [Bug runtime/13289] " dsmith at redhat dot com
@ 2011-10-13 21:26 ` dsmith at redhat dot com
1 sibling, 0 replies; 3+ messages in thread
From: dsmith at redhat dot com @ 2011-10-13 21:26 UTC (permalink / raw)
To: systemtap
http://sourceware.org/bugzilla/show_bug.cgi?id=13289
--- Comment #2 from David Smith <dsmith at redhat dot com> 2011-10-13 21:25:55 UTC ---
Added a couple of bug fixes and an error message improvement in commit 2ec6b38.
--
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2011-10-13 21:26 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2011-10-12 21:52 [Bug runtime/13289] New: %m/%M printf formatting operators access memory incorrectly dsmith at redhat dot com
2011-10-12 21:53 ` [Bug runtime/13289] " dsmith at redhat dot com
2011-10-13 21:26 ` dsmith at redhat dot com
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).