- --
Viewing Issue Advanced Details
| ID | Category [?] | Severity [?] | Reproducibility | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 05248 | Misc. | Critical (emulator) | Always | Jul 29, 2013, 12:24 | Nov 5, 2022, 09:05 |
| Tester | Firewave | View Status | Public | Platform | MAME (Self-compiled) |
| Assigned To | Resolution | Fixed | OS | ||
| Status [?] | Resolved | Driver | |||
| Version | 0.149u1 | Fixed in Version | Build | Debug | |
| Fixed in Git Commit | Github Pull Request # | ||||
| Summary | 05248: m1itjob: AddressSanitizer: heap-use-after-free | ||||
| Description |
=================================================================
==52741==ERROR: AddressSanitizer: heap-use-after-free on address 0x7f7b599a8291 at pc 0x152292b9 bp 0x7ffff3e68ab0 sp 0x7ffff3e68aa8
READ of size 1 at 0x7f7b599a8291 thread T0
#0 0x152292b8 in _ZN15okim6376_device14generate_adpcmEP10ADPCMVoicePsii /home/notroot/trunk/src/emu/sound/okim6376.c:319
#1 0x1522e755 in _ZN15okim6376_device19sound_stream_updateER12sound_streamPPiS3_i /home/notroot/trunk/src/emu/sound/okim6376.c:573
#2 0x1522efd0 in _ZThn1120_N15okim6376_device19sound_stream_updateER12sound_streamPPiS3_i /home/notroot/trunk/src/emu/sound/okim6376.c:580
#3 0x17f6f9e8 in _ZN12sound_stream25device_stream_update_stubEP8device_tPS_PvPPiS5_i /home/notroot/trunk/src/emu/sound.c:467
#4 0x17f762a4 in _ZN12sound_stream16generate_samplesEi /home/notroot/trunk/src/emu/sound.c:628
#5 0x17f7551a in _ZN12sound_stream6updateEv /home/notroot/trunk/src/emu/sound.c:308
#6 0x17f75b99 in _ZN12sound_stream16generate_samplesEi /home/notroot/trunk/src/emu/sound.c:613
#7 0x17f7551a in _ZN12sound_stream6updateEv /home/notroot/trunk/src/emu/sound.c:308
#8 0x17f76539 in _ZN12sound_stream24output_since_last_updateEiRi /home/notroot/trunk/src/emu/sound.c:325
#9 0x17fa3534 in _ZN14speaker_device3mixEPiS0_Rib /home/notroot/trunk/src/emu/speaker.c:131
#10 0x17f822f0 in _ZN13sound_manager6updateEPvi /home/notroot/trunk/src/emu/sound.c:1034
#11 0x17efda17 in _ZNK13delegate_baseIvPvi8_noparamS1_S1_EclES0_i /home/notroot/trunk/src/emu/delegate.h:541
#12 0x17eee2bc in _ZN16device_scheduler14execute_timersEv /home/notroot/trunk/src/emu/schedule.c:936
#13 0x17ee1769 in _ZN16device_scheduler9timesliceEv /home/notroot/trunk/src/emu/schedule.c:454
#14 0x17a8888b in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:412
#15 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
#16 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
#17 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
#18 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
#19 0x1e7a7bc in _start ??:?
0x7f7b599a8291 is located 31377 bytes inside of 131072-byte region [0x7f7b599a0800,0x7f7b599c0800)
freed by thread T0 here:
#0 0x1e6c644 in free ??:?
#1 0x18df14e2 in _Z8SZipFreePvS_ /home/notroot/trunk/src/lib/util/un7z.c:63
#2 0x19370f43 in SzArEx_Extract /home/notroot/trunk/src/lib/lib7z/7zIn.c:1356
#3 0x18df9401 in _Z19_7z_file_decompressP8_7z_filePvj /home/notroot/trunk/src/lib/util/un7z.c:475
#4 0x177694cf in _ZN8emu_file16load__7zped_fileEv /home/notroot/trunk/src/emu/fileio.c:908
#5 0x17766b6a in _ZN8emu_file14attempt__7zpedEv /home/notroot/trunk/src/emu/fileio.c:885
#6 0x1776298b in _ZN8emu_file9open_nextEv /home/notroot/trunk/src/emu/fileio.c:393
#7 0x1776443f in _ZN8emu_file4openEPKcj /home/notroot/trunk/src/emu/fileio.c:343
#8 0x17764f98 in _ZN8emu_file4openEPKcS1_S1_j /home/notroot/trunk/src/emu/fileio.c:357
#9 0x17e97fba in _Z19common_process_fileR11emu_optionsPKcbjPK9rom_entryPP8emu_file /home/notroot/trunk/src/emu/romload.c:113
#10 0x17eb3af1 in _ZL13open_rom_fileP15romload_privatePKcPK9rom_entryR7astringb /home/notroot/trunk/src/emu/romload.c:576
#11 0x17ea501b in _ZL19process_rom_entriesP15romload_privatePKcPK9rom_entryS5_P8device_tb /home/notroot/trunk/src/emu/romload.c:906
#12 0x17eaeaa2 in _ZL19process_region_listP15romload_private /home/notroot/trunk/src/emu/romload.c:1455
#13 0x17eab476 in _Z8rom_initR15running_machine /home/notroot/trunk/src/emu/romload.c:1511
#14 0x17a7fda4 in _ZN15running_machine5startEv /home/notroot/trunk/src/emu/machine.c:291
#15 0x17a88439 in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:391
#16 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
#17 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
#18 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
#19 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
previously allocated by thread T0 here:
#0 0x1e6c724 in __interceptor_malloc ??:?
#1 0x18df1308 in _Z9SZipAllocPvm /home/notroot/trunk/src/lib/util/un7z.c:58
#2 0x19371353 in SzArEx_Extract /home/notroot/trunk/src/lib/lib7z/7zIn.c:1366
#3 0x18df9401 in _Z19_7z_file_decompressP8_7z_filePvj /home/notroot/trunk/src/lib/util/un7z.c:475
#4 0x177694cf in _ZN8emu_file16load__7zped_fileEv /home/notroot/trunk/src/emu/fileio.c:908
#5 0x17766b6a in _ZN8emu_file14attempt__7zpedEv /home/notroot/trunk/src/emu/fileio.c:885
#6 0x1776298b in _ZN8emu_file9open_nextEv /home/notroot/trunk/src/emu/fileio.c:393
#7 0x1776443f in _ZN8emu_file4openEPKcj /home/notroot/trunk/src/emu/fileio.c:343
#8 0x17764f98 in _ZN8emu_file4openEPKcS1_S1_j /home/notroot/trunk/src/emu/fileio.c:357
#9 0x17e97fba in _Z19common_process_fileR11emu_optionsPKcbjPK9rom_entryPP8emu_file /home/notroot/trunk/src/emu/romload.c:113
#10 0x17eb3af1 in _ZL13open_rom_fileP15romload_privatePKcPK9rom_entryR7astringb /home/notroot/trunk/src/emu/romload.c:576
#11 0x17ea501b in _ZL19process_rom_entriesP15romload_privatePKcPK9rom_entryS5_P8device_tb /home/notroot/trunk/src/emu/romload.c:906
#12 0x17eaeaa2 in _ZL19process_region_listP15romload_private /home/notroot/trunk/src/emu/romload.c:1455
#13 0x17eab476 in _Z8rom_initR15running_machine /home/notroot/trunk/src/emu/romload.c:1511
#14 0x17a7fda4 in _ZN15running_machine5startEv /home/notroot/trunk/src/emu/machine.c:291
#15 0x17a88439 in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:391
#16 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
#17 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
#18 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
#19 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
Shadow bytes around the buggy address:
0x0fefeb32d000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d010: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d020: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d030: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d040: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0fefeb32d050: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d060: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d070: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d080: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d090: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fefeb32d0a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
ASan internal: fe
==52741==ABORTING
|
||||
| Steps To Reproduce | |||||
| Additional Information | |||||
| Github Commit | |||||
| Flags | |||||
| Regression Version | |||||
| Affected Sets / Systems | m1itjob | ||||
|
Attached Files
|
|||||
Relationships
| There are no relationship linked to this issue. |
Notes
2
|
No.14589
Firewave Senior Tester
Dec 31, 2017, 23:39
|
Still happening in 0.193
==118674==ERROR: AddressSanitizer: heap-use-after-free on address 0x7f78bae0f291 at pc 0x00000d0f99dc bp 0x7fff89ae7570 sp 0x7fff89ae7568
READ of size 1 at 0x7f78bae0f291 thread T0
#0 0xd0f99db in okim6376_device::generate_adpcm(okim6376_device::ADPCMVoice*, short*, int, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:308:14
#1 0xd0fab86 in okim6376_device::sound_stream_update(sound_stream&, int**, int**, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:560:4
#2 0xd0fbddf in non-virtual thunk to okim6376_device::sound_stream_update(sound_stream&, int**, int**, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp
#3 0xe7e0ea4 in operator() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/delegate.h:544:11
#4 0xe7e0ea4 in sound_stream::generate_samples(int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:641
#5 0xe7e09cf in update /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:290:2
#6 0xe7e09cf in sound_stream::generate_samples(int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:616
#7 0xe7e1218 in update /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:290:2
#8 0xe7e1218 in sound_stream::output_since_last_update(int, int&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:316
#9 0xe7ea4d3 in speaker_device::mix(int*, int*, int&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/speaker.cpp:98:54
#10 0xe7e6c15 in sound_manager::update(void*, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:1064:11
#11 0xe795665 in operator() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/delegate.h:544:11
#12 0xe795665 in device_scheduler::execute_timers() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/schedule.cpp:911
#13 0xe78ea0f in device_scheduler::timeslice() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/schedule.cpp:530:2
#14 0xe6a324b in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:357:17
#15 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
#16 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
#17 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
#18 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
#19 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
#20 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
#21 0x1431838 in _start (/mnt/mame/mame64+0x1431838)
0x7f78bae0f291 is located 96913 bytes inside of 131072-byte region [0x7f78badf7800,0x7f78bae17800)
freed by thread T0 here:
#0 0x14d26e2 in free /opt/media/clang_nightly/llvm/utils/release/final/llvm.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:47:3
#1 0xf3b24fb in SzFree /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zAlloc.c:45:3
#2 0xf3b8de6 in SzArEx_Extract /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zArcIn.c:1675:5
#3 0xf27ce0f in decompress /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:408:19
#4 0xf27ce0f in util::(anonymous namespace)::m7z_file_wrapper::decompress(void*, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:233
#5 0xe47941e in emu_file::load_zipped_file() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:737:33
#6 0xe47866b in emu_file::attempt_zipped() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:712:75
#7 0xe4753f7 in emu_file::open_next() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:358:13
#8 0xe476b85 in open /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:313:9
#9 0xe476b85 in emu_file::open(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:325
#10 0xe752e41 in common_process_file(emu_options&, char const*, bool, unsigned int, rom_entry const*, osd_file::error&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:48:24
#11 0xe758cd5 in rom_load_manager::open_rom_file(char const*, rom_entry const*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:574:12
#12 0xe75dedd in rom_load_manager::process_rom_entries(char const*, rom_entry const*, rom_entry const*, device_t*, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:909:28
#13 0xe76933e in rom_load_manager::process_region_list() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1461:5
#14 0xe76b8ef in rom_load_manager::rom_load_manager(running_machine&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1533:2
#15 0xe69f947 in make_unique_clear<rom_load_manager, running_machine &> /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/corealloc.h:74:38
#16 0xe69f947 in running_machine::start() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:238
#17 0xe6a2a41 in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:310:3
#18 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
#19 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
#20 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
#21 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
#22 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
#23 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
previously allocated by thread T0 here:
#0 0x14d2a23 in malloc /opt/media/clang_nightly/llvm/utils/release/final/llvm.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:67:3
#1 0xf3b24e0 in SzAlloc /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zAlloc.c:32:10
#2 0xf3b8e48 in SzArEx_Extract /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zArcIn.c:1683:28
#3 0xf27ce0f in decompress /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:408:19
#4 0xf27ce0f in util::(anonymous namespace)::m7z_file_wrapper::decompress(void*, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:233
#5 0xe47941e in emu_file::load_zipped_file() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:737:33
#6 0xe47866b in emu_file::attempt_zipped() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:712:75
#7 0xe4753f7 in emu_file::open_next() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:358:13
#8 0xe476b85 in open /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:313:9
#9 0xe476b85 in emu_file::open(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:325
#10 0xe752e41 in common_process_file(emu_options&, char const*, bool, unsigned int, rom_entry const*, osd_file::error&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:48:24
#11 0xe758cd5 in rom_load_manager::open_rom_file(char const*, rom_entry const*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:574:12
#12 0xe75dedd in rom_load_manager::process_rom_entries(char const*, rom_entry const*, rom_entry const*, device_t*, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:909:28
#13 0xe76933e in rom_load_manager::process_region_list() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1461:5
#14 0xe76b8ef in rom_load_manager::rom_load_manager(running_machine&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1533:2
#15 0xe69f947 in make_unique_clear<rom_load_manager, running_machine &> /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/corealloc.h:74:38
#16 0xe69f947 in running_machine::start() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:238
#17 0xe6a2a41 in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:310:3
#18 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
#19 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
#20 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
#21 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
#22 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
#23 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
SUMMARY: AddressSanitizer: heap-use-after-free /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:308:14 in okim6376_device::generate_adpcm(okim6376_device::ADPCMVoice*, short*, int, int)
Shadow bytes around the buggy address:
0x0fef975b9e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0fef975b9e50: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9e90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0fef975b9ea0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==118674==ABORTING
|
|---|---|
|
No.20734
Firewave Senior Tester
Nov 5, 2022, 09:05
|
No ASAN error reported with 0.249. |