Viewing Issue Advanced Details
ID Category [?] Severity [?] Reproducibility Date Submitted Last Update
05248 Misc. Critical (emulator) Always Jul 29, 2013, 12:24 Nov 5, 2022, 09:05
Tester Firewave View Status Public Platform MAME (Self-compiled)
Assigned To Resolution Fixed OS
Status [?] Resolved Driver
Version 0.149u1 Fixed in Version Build Debug
Fixed in Git Commit Github Pull Request #
Summary 05248: m1itjob: AddressSanitizer: heap-use-after-free
Description
=================================================================
==52741==ERROR: AddressSanitizer: heap-use-after-free on address 0x7f7b599a8291 at pc 0x152292b9 bp 0x7ffff3e68ab0 sp 0x7ffff3e68aa8
READ of size 1 at 0x7f7b599a8291 thread T0
    #0 0x152292b8 in _ZN15okim6376_device14generate_adpcmEP10ADPCMVoicePsii /home/notroot/trunk/src/emu/sound/okim6376.c:319
    #1 0x1522e755 in _ZN15okim6376_device19sound_stream_updateER12sound_streamPPiS3_i /home/notroot/trunk/src/emu/sound/okim6376.c:573
    #2 0x1522efd0 in _ZThn1120_N15okim6376_device19sound_stream_updateER12sound_streamPPiS3_i /home/notroot/trunk/src/emu/sound/okim6376.c:580
    #3 0x17f6f9e8 in _ZN12sound_stream25device_stream_update_stubEP8device_tPS_PvPPiS5_i /home/notroot/trunk/src/emu/sound.c:467
    #4 0x17f762a4 in _ZN12sound_stream16generate_samplesEi /home/notroot/trunk/src/emu/sound.c:628
    #5 0x17f7551a in _ZN12sound_stream6updateEv /home/notroot/trunk/src/emu/sound.c:308
    #6 0x17f75b99 in _ZN12sound_stream16generate_samplesEi /home/notroot/trunk/src/emu/sound.c:613
    #7 0x17f7551a in _ZN12sound_stream6updateEv /home/notroot/trunk/src/emu/sound.c:308
    #8 0x17f76539 in _ZN12sound_stream24output_since_last_updateEiRi /home/notroot/trunk/src/emu/sound.c:325
    #9 0x17fa3534 in _ZN14speaker_device3mixEPiS0_Rib /home/notroot/trunk/src/emu/speaker.c:131
    #10 0x17f822f0 in _ZN13sound_manager6updateEPvi /home/notroot/trunk/src/emu/sound.c:1034
    #11 0x17efda17 in _ZNK13delegate_baseIvPvi8_noparamS1_S1_EclES0_i /home/notroot/trunk/src/emu/delegate.h:541
    #12 0x17eee2bc in _ZN16device_scheduler14execute_timersEv /home/notroot/trunk/src/emu/schedule.c:936
    #13 0x17ee1769 in _ZN16device_scheduler9timesliceEv /home/notroot/trunk/src/emu/schedule.c:454
    #14 0x17a8888b in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:412
    #15 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
    #16 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
    #17 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
    #18 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
    #19 0x1e7a7bc in _start ??:?
0x7f7b599a8291 is located 31377 bytes inside of 131072-byte region [0x7f7b599a0800,0x7f7b599c0800)
freed by thread T0 here:
    #0 0x1e6c644 in free ??:?
    #1 0x18df14e2 in _Z8SZipFreePvS_ /home/notroot/trunk/src/lib/util/un7z.c:63
    #2 0x19370f43 in SzArEx_Extract /home/notroot/trunk/src/lib/lib7z/7zIn.c:1356
    #3 0x18df9401 in _Z19_7z_file_decompressP8_7z_filePvj /home/notroot/trunk/src/lib/util/un7z.c:475
    #4 0x177694cf in _ZN8emu_file16load__7zped_fileEv /home/notroot/trunk/src/emu/fileio.c:908
    #5 0x17766b6a in _ZN8emu_file14attempt__7zpedEv /home/notroot/trunk/src/emu/fileio.c:885
    #6 0x1776298b in _ZN8emu_file9open_nextEv /home/notroot/trunk/src/emu/fileio.c:393
    #7 0x1776443f in _ZN8emu_file4openEPKcj /home/notroot/trunk/src/emu/fileio.c:343
    #8 0x17764f98 in _ZN8emu_file4openEPKcS1_S1_j /home/notroot/trunk/src/emu/fileio.c:357
    #9 0x17e97fba in _Z19common_process_fileR11emu_optionsPKcbjPK9rom_entryPP8emu_file /home/notroot/trunk/src/emu/romload.c:113
    #10 0x17eb3af1 in _ZL13open_rom_fileP15romload_privatePKcPK9rom_entryR7astringb /home/notroot/trunk/src/emu/romload.c:576
    #11 0x17ea501b in _ZL19process_rom_entriesP15romload_privatePKcPK9rom_entryS5_P8device_tb /home/notroot/trunk/src/emu/romload.c:906
    #12 0x17eaeaa2 in _ZL19process_region_listP15romload_private /home/notroot/trunk/src/emu/romload.c:1455
    #13 0x17eab476 in _Z8rom_initR15running_machine /home/notroot/trunk/src/emu/romload.c:1511
    #14 0x17a7fda4 in _ZN15running_machine5startEv /home/notroot/trunk/src/emu/machine.c:291
    #15 0x17a88439 in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:391
    #16 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
    #17 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
    #18 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
    #19 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
previously allocated by thread T0 here:
    #0 0x1e6c724 in __interceptor_malloc ??:?
    #1 0x18df1308 in _Z9SZipAllocPvm /home/notroot/trunk/src/lib/util/un7z.c:58
    #2 0x19371353 in SzArEx_Extract /home/notroot/trunk/src/lib/lib7z/7zIn.c:1366
    #3 0x18df9401 in _Z19_7z_file_decompressP8_7z_filePvj /home/notroot/trunk/src/lib/util/un7z.c:475
    #4 0x177694cf in _ZN8emu_file16load__7zped_fileEv /home/notroot/trunk/src/emu/fileio.c:908
    #5 0x17766b6a in _ZN8emu_file14attempt__7zpedEv /home/notroot/trunk/src/emu/fileio.c:885
    #6 0x1776298b in _ZN8emu_file9open_nextEv /home/notroot/trunk/src/emu/fileio.c:393
    #7 0x1776443f in _ZN8emu_file4openEPKcj /home/notroot/trunk/src/emu/fileio.c:343
    #8 0x17764f98 in _ZN8emu_file4openEPKcS1_S1_j /home/notroot/trunk/src/emu/fileio.c:357
    #9 0x17e97fba in _Z19common_process_fileR11emu_optionsPKcbjPK9rom_entryPP8emu_file /home/notroot/trunk/src/emu/romload.c:113
    #10 0x17eb3af1 in _ZL13open_rom_fileP15romload_privatePKcPK9rom_entryR7astringb /home/notroot/trunk/src/emu/romload.c:576
    #11 0x17ea501b in _ZL19process_rom_entriesP15romload_privatePKcPK9rom_entryS5_P8device_tb /home/notroot/trunk/src/emu/romload.c:906
    #12 0x17eaeaa2 in _ZL19process_region_listP15romload_private /home/notroot/trunk/src/emu/romload.c:1455
    #13 0x17eab476 in _Z8rom_initR15running_machine /home/notroot/trunk/src/emu/romload.c:1511
    #14 0x17a7fda4 in _ZN15running_machine5startEv /home/notroot/trunk/src/emu/machine.c:291
    #15 0x17a88439 in _ZN15running_machine3runEb /home/notroot/trunk/src/emu/machine.c:391
    #16 0x17a74411 in _Z12mame_executeR11emu_optionsR13osd_interface /home/notroot/trunk/src/emu/mame.c:190
    #17 0x173eb8a6 in _ZN12cli_frontend7executeEiPPc /home/notroot/trunk/src/emu/clifront.c:255
    #18 0x10708f01 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:378
    #19 0x7f7b63e5cea4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
Shadow bytes around the buggy address:
  0x0fefeb32d000: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d010: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d020: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d030: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d040: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0fefeb32d050: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d060: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d070: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d080: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d090: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fefeb32d0a0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:     fa
  Heap right redzone:    fb
  Freed heap region:     fd
  Stack left redzone:    f1
  Stack mid redzone:     f2
  Stack right redzone:   f3
  Stack partial redzone: f4
  Stack after return:    f5
  Stack use after scope: f8
  Global redzone:        f9
  Global init order:     f6
  Poisoned by user:      f7
  ASan internal:         fe
==52741==ABORTING
Steps To Reproduce
Additional Information
Github Commit
Flags
Regression Version
Affected Sets / Systems m1itjob
Attached Files
 
Relationships
There are no relationship linked to this issue.
Notes
2
User avatar
No.14589
Firewave
Senior Tester
Dec 31, 2017, 23:39
Still happening in 0.193

==118674==ERROR: AddressSanitizer: heap-use-after-free on address 0x7f78bae0f291 at pc 0x00000d0f99dc bp 0x7fff89ae7570 sp 0x7fff89ae7568
READ of size 1 at 0x7f78bae0f291 thread T0
    #0 0xd0f99db in okim6376_device::generate_adpcm(okim6376_device::ADPCMVoice*, short*, int, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:308:14
    #1 0xd0fab86 in okim6376_device::sound_stream_update(sound_stream&, int**, int**, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:560:4
    #2 0xd0fbddf in non-virtual thunk to okim6376_device::sound_stream_update(sound_stream&, int**, int**, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp
    #3 0xe7e0ea4 in operator() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/delegate.h:544:11
    #4 0xe7e0ea4 in sound_stream::generate_samples(int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:641
    #5 0xe7e09cf in update /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:290:2
    #6 0xe7e09cf in sound_stream::generate_samples(int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:616
    #7 0xe7e1218 in update /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:290:2
    #8 0xe7e1218 in sound_stream::output_since_last_update(int, int&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:316
    #9 0xe7ea4d3 in speaker_device::mix(int*, int*, int&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/speaker.cpp:98:54
    #10 0xe7e6c15 in sound_manager::update(void*, int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/sound.cpp:1064:11
    #11 0xe795665 in operator() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/delegate.h:544:11
    #12 0xe795665 in device_scheduler::execute_timers() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/schedule.cpp:911
    #13 0xe78ea0f in device_scheduler::timeslice() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/schedule.cpp:530:2
    #14 0xe6a324b in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:357:17
    #15 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
    #16 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
    #17 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
    #18 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
    #19 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
    #20 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #21 0x1431838 in _start (/mnt/mame/mame64+0x1431838)

0x7f78bae0f291 is located 96913 bytes inside of 131072-byte region [0x7f78badf7800,0x7f78bae17800)
freed by thread T0 here:
    #0 0x14d26e2 in free /opt/media/clang_nightly/llvm/utils/release/final/llvm.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:47:3
    #1 0xf3b24fb in SzFree /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zAlloc.c:45:3
    #2 0xf3b8de6 in SzArEx_Extract /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zArcIn.c:1675:5
    #3 0xf27ce0f in decompress /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:408:19
    #4 0xf27ce0f in util::(anonymous namespace)::m7z_file_wrapper::decompress(void*, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:233
    #5 0xe47941e in emu_file::load_zipped_file() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:737:33
    #6 0xe47866b in emu_file::attempt_zipped() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:712:75
    #7 0xe4753f7 in emu_file::open_next() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:358:13
    #8 0xe476b85 in open /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:313:9
    #9 0xe476b85 in emu_file::open(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:325
    #10 0xe752e41 in common_process_file(emu_options&, char const*, bool, unsigned int, rom_entry const*, osd_file::error&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:48:24
    #11 0xe758cd5 in rom_load_manager::open_rom_file(char const*, rom_entry const*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:574:12
    #12 0xe75dedd in rom_load_manager::process_rom_entries(char const*, rom_entry const*, rom_entry const*, device_t*, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:909:28
    #13 0xe76933e in rom_load_manager::process_region_list() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1461:5
    #14 0xe76b8ef in rom_load_manager::rom_load_manager(running_machine&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1533:2
    #15 0xe69f947 in make_unique_clear<rom_load_manager, running_machine &> /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/corealloc.h:74:38
    #16 0xe69f947 in running_machine::start() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:238
    #17 0xe6a2a41 in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:310:3
    #18 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
    #19 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
    #20 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
    #21 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
    #22 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
    #23 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)

previously allocated by thread T0 here:
    #0 0x14d2a23 in malloc /opt/media/clang_nightly/llvm/utils/release/final/llvm.src/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:67:3
    #1 0xf3b24e0 in SzAlloc /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zAlloc.c:32:10
    #2 0xf3b8e48 in SzArEx_Extract /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../3rdparty/lzma/C/7zArcIn.c:1683:28
    #3 0xf27ce0f in decompress /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:408:19
    #4 0xf27ce0f in util::(anonymous namespace)::m7z_file_wrapper::decompress(void*, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/un7z.cpp:233
    #5 0xe47941e in emu_file::load_zipped_file() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:737:33
    #6 0xe47866b in emu_file::attempt_zipped() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:712:75
    #7 0xe4753f7 in emu_file::open_next() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:358:13
    #8 0xe476b85 in open /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:313:9
    #9 0xe476b85 in emu_file::open(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, unsigned int) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/fileio.cpp:325
    #10 0xe752e41 in common_process_file(emu_options&, char const*, bool, unsigned int, rom_entry const*, osd_file::error&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:48:24
    #11 0xe758cd5 in rom_load_manager::open_rom_file(char const*, rom_entry const*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:574:12
    #12 0xe75dedd in rom_load_manager::process_rom_entries(char const*, rom_entry const*, rom_entry const*, device_t*, bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:909:28
    #13 0xe76933e in rom_load_manager::process_region_list() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1461:5
    #14 0xe76b8ef in rom_load_manager::rom_load_manager(running_machine&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/romload.cpp:1533:2
    #15 0xe69f947 in make_unique_clear<rom_load_manager, running_machine &> /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/lib/util/corealloc.h:74:38
    #16 0xe69f947 in running_machine::start() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:238
    #17 0xe6a2a41 in running_machine::run(bool) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/emu/machine.cpp:310:3
    #18 0x8cd10e0 in mame_machine_manager::execute() /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:236:19
    #19 0x8e1e0d3 in cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:257:22
    #20 0x8e20ee0 in cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/clifront.cpp:273:3
    #21 0x8cd3717 in emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&) /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/frontend/mame/mame.cpp:336:18
    #22 0x8acddf2 in main /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/osd/sdl/sdlmain.cpp:216:9
    #23 0x7f78d9d2682f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)

SUMMARY: AddressSanitizer: heap-use-after-free /mnt/mame/build/projects/sdl/mame/gmake-linux-clang/../../../../../src/devices/sound/okim6376.cpp:308:14 in okim6376_device::generate_adpcm(okim6376_device::ADPCMVoice*, short*, int, int)
Shadow bytes around the buggy address:
  0x0fef975b9e00: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e10: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e20: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
=>0x0fef975b9e50: fd fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e80: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9e90: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x0fef975b9ea0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==118674==ABORTING 
User avatar
No.20734
Firewave
Senior Tester
Nov 5, 2022, 09:05
No ASAN error reported with 0.249.