- --
Viewing Issue Advanced Details
| ID | Category [?] | Severity [?] | Reproducibility | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 05511 | Misc. | Critical (emulator) | Always | Apr 10, 2014, 22:20 | Jan 3, 2015, 20:25 |
| Tester | Firewave | View Status | Public | Platform | MESS (Self-compiled) |
| Assigned To | AWJ | Resolution | Fixed | OS | Linux |
| Status [?] | Resolved | Driver | |||
| Version | 0.153 | Fixed in Version | 0.154 | Build | 64-bit |
| Fixed in Git Commit | Github Pull Request # | ||||
| Summary |
|
||||
| Description |
==1685==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fffe8c77140 at pc 0xcf6bba bp 0x7fffe8c76ed0 sp 0x7fffe8c76690
READ of size 256 at 0x7fffe8c77140 thread T0
#0 0xcf6bb9 in memcpy /home/ben/development/llvm/3.4/final/llvm.src/projects/compiler-rt/lib/asan/asan_interceptors.cc:377
#1 0x543c2ce in device_gfx_interface::decode_gfx(gfx_decode_entry const*) /home/notroot/trunk/src/emu/digfx.c:197
#2 0x542e213 in device_t::start() /home/notroot/trunk/src/emu/device.c:407
#3 0x55fc92b in running_machine::start_all_devices() /home/notroot/trunk/src/emu/machine.c:1095
#4 0x55fa0dd in running_machine::start() /home/notroot/trunk/src/emu/machine.c:281
#5 0x55fd18d in running_machine::run(bool) /home/notroot/trunk/src/emu/machine.c:349
#6 0x55f46d7 in mame_execute(emu_options&, osd_interface&) /home/notroot/trunk/src/emu/mame.c:194
#7 0x53f5518 in cli_frontend::execute(int, char**) /home/notroot/trunk/src/emu/clifront.c:237
#8 0x2c0fba5 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:379
#9 0x7f69b475bde4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
#10 0xd1cb8c in _start (/home/notroot/trunk/mess64d+0xd1cb8c)
Address 0x7fffe8c77140 is located in stack of thread T0 at offset 352 in frame
#0 0x543bb0f in device_gfx_interface::decode_gfx(gfx_decode_entry const*) /home/notroot/trunk/src/emu/digfx.c:117
This frame has 1 object(s):
[32, 352) 'glcopy' <== Memory access at offset 352 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
(longjmp and C++ exceptions *are* supported)
|
||||
| Steps To Reproduce | |||||
| Additional Information | |||||
| Github Commit | |||||
| Flags | |||||
| Regression Version | |||||
| Affected Sets / Systems | supracan | ||||
|
Attached Files
|
|||||
Relationships
| There are no relationship linked to this issue. |
Notes
1
|
No.10695
Firewave Senior Tester
May 13, 2014, 09:25
|
Fixed in either r30339 or r30360. |
|---|