[Bug gprofng/32096] UBSAN issues in gprofng

[arsen at sourceware dot org]

https://sourceware.org/bugzilla/show_bug.cgi?id=32096

Arsen Arsenović <arsen at sourceware dot org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |arsen at sourceware dot org

--- Comment #4 from Arsen Arsenović <arsen at sourceware dot org> ---
(In reply to Vladimir Mezentsev from comment #2)
> I have fixes for these runtime errors:
>   load of value 4294967295, which is not a valid value for type 'Cmsg_warn'
>   null pointer passed as argument 2, which is declared to never be null
>   load of value 4294967295, which is not a valid value for type
> 'ProfData_type'
>   load of value 4294967295, which is not a valid value for type
> 'ProfData_type'
>   member access within misaligned address 0x00000357583c for type 'union
> Value', which requires 8 byte alignment
>   reference binding to misaligned address 0x00000357583c for type 'long
> unsigned int', which requires 8 byte alignment
> 
> 
> I see other errors like:
>  member call on address 0x000003192cf0 which does not point to an object of
> type 'Vector'
> These errors look like a bug in libubsan.
> I don't see anything wrong in gprofng.

I think it's probably:

(gdb) break __ubsan::Diag::~Diag() 
Breakpoint 3 at 0x7ffff74bde20: file
/usr/src/debug/sys-devel/gcc-15.0.0_pre20240818/gcc-15-20240818/libsanitizer/ubsan/ubsan_diag.cpp,
line 351.
(gdb) r
Starting program: /home/arsen/gcc/binutils-bld/gprofng/src/gp-display-text
display text -metrics i.totalcpu -func test.er
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/usr/lib64/libthread_db.so.1".
Warning: History and command editing is not supported on this system.
display: *** Error: not a valid experiment name
text: *** Error: not a valid experiment name
Current metrics: i.totalcpu:name
Current Sort Metric: Inclusive Total CPU Time ( i.totalcpu )

Breakpoint 3, __ubsan::Diag::~Diag (this=this@entry=0x7fffffffc050) at
/usr/src/debug/sys-devel/gcc-15.0.0_pre20240818/gcc-15-20240818/libsanitizer/ubsan/ubsan_diag.cpp:351
351     Diag::~Diag() {
(gdb) 
#3  0x0000555555f96676 in CallStackP::add_stack (this=0x555557558540,
dDscr=0x5555575572b0, idx=0, frp=<optimized out>, cstCtxChunk=<optimized out>)
at ../../../binutils-gdb/gprofng/src/CallStack.cc:635
635      CallStackNode *node = (CallStackNode*) add_stack
((Vector<Histable*>*)natpcs);
(gdb) list 472
467     // When pipeline optimization is turnd off, cstctxchunk passed is NULL
468     void
469     CallStackP::add_stack (DataDescriptor *dDscr, long idx, FramePacket
*frp,
470                           cstk_ctx_chunk* cstCtxChunk)
471     {
472      Vector<DbeInstr*> *natpcs = NULL;
473      cstk_ctx *cstctx = NULL;
474      int stack_size = frp->stackSize ();
475      if (cstCtxChunk != NULL)
476        {
(gdb)

-- 
You are receiving this mail because:
You are on the CC list for the bug.