- --
Viewing Issue Advanced Details
| ID | Category [?] | Severity [?] | Reproducibility | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 05671 | Crash/Freeze | Critical (emulator) | Always | Aug 11, 2014, 19:04 | Nov 5, 2022, 09:19 |
| Tester | Firewave | View Status | Public | Platform | MESS (Self-compiled) |
| Assigned To | Resolution | Fixed | OS | Linux | |
| Status [?] | Resolved | Driver | |||
| Version | 0.154 | Fixed in Version | Build | Debug | |
| Fixed in Git Commit | Github Pull Request # | ||||
| Summary |
|
||||
| Description |
==12003==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fff433241c2 at pc 0x5ccb91b bp 0x7fff43323d40 sp 0x7fff43323d38
READ of size 1 at 0x7fff433241c2 thread T0
#0 0x5ccb91a in alto2_cpu_device::disasm_disassemble(char*, unsigned int, unsigned char const*, unsigned char const*, unsigned int) /home/notroot/trunk/src/emu/cpu/alto2/alto2dsm.c:227
#1 0x5ccb998 in non-virtual thunk to alto2_cpu_device::disasm_disassemble(char*, unsigned int, unsigned char const*, unsigned char const*, unsigned int) /home/notroot/trunk/src/emu/cpu/alto2/alto2dsm.c:391
#2 0x5b186d5 in device_disasm_interface::disassemble(char*, unsigned int, unsigned char const*, unsigned char const*, unsigned int) /home/notroot/trunk/src/emu/didisasm.h:63
#3 0x5b186d5 in device_debug::disassemble(char*, unsigned int, unsigned char const*, unsigned char const*) const /home/notroot/trunk/src/emu/debug/debugcpu.c:2038
#4 0x5b30851 in debug_view_disasm::recompute(unsigned int, int, int) /home/notroot/trunk/src/emu/debug/dvdisasm.c:402
#5 0x5b31ae0 in debug_view_disasm::view_update() /home/notroot/trunk/src/emu/debug/dvdisasm.c:511
#6 0x5b29bcd in debug_view::end_update() /home/notroot/trunk/src/emu/debug/debugvw.c:122
#7 0x5b2a3d4 in debug_view::set_source(debug_view_source const&) /home/notroot/trunk/src/emu/debug/debugvw.c:229
#8 0x5b2e05c in debug_view_disasm::enumerate_sources() /home/notroot/trunk/src/emu/debug/dvdisasm.c:106
#9 0x5b2d61c in debug_view_disasm::debug_view_disasm(running_machine&, void (*)(debug_view&, void*), void*) /home/notroot/trunk/src/emu/debug/dvdisasm.c:59
#10 0x5b2add4 in debug_view_manager::alloc_view(debug_view_type, void (*)(debug_view&, void*), void*) /home/notroot/trunk/src/emu/debug/debugvw.c:356
#11 0x2ee8349 in DebuggerView::DebuggerView(debug_view_type const&, running_machine*, QWidget*) /home/notroot/trunk/src/osd/modules/debugger/qt/debugqtview.c:19
#12 0x2ec1e8b in DasmDockWidget::DasmDockWidget(running_machine*, QWidget*) /home/notroot/trunk/src/osd/modules/debugger/qt/debugqtmainwindow.h:80
#13 0x2eb75d6 in MainWindow::MainWindow(running_machine*, QWidget*) /home/notroot/trunk/src/osd/modules/debugger/qt/debugqtmainwindow.c:110
#14 0x2ea86b6 in debugger_qt::wait_for_debugger(device_t&, bool) /home/notroot/trunk/src/osd/modules/debugger/debugqt.c:267
#15 0x5b6e086 in osd_interface::wait_for_debugger(device_t&, bool) /home/notroot/trunk/src/osd/osdepend.c:277
#16 0x5b149e3 in device_debug::instruction_hook(unsigned int) /home/notroot/trunk/src/emu/debug/debugcpu.c:1937
#17 0x4cad869 in debugger_instruction_hook(device_t*, unsigned int) /home/notroot/trunk/src/emu/debugger.h:50
#18 0x4cad869 in alto2_cpu_device::execute_run() /home/notroot/trunk/src/emu/cpu/alto2/alto2cpu.c:2320
#19 0x4caf3bf in non-virtual thunk to alto2_cpu_device::execute_run() /home/notroot/trunk/src/emu/cpu/alto2/alto2cpu.c:2714
#20 0x5a46255 in device_execute_interface::run() /home/notroot/trunk/src/emu/diexec.h:189
#21 0x5a46255 in device_scheduler::timeslice() /home/notroot/trunk/src/emu/schedule.c:480
#22 0x5967cc1 in running_machine::run(bool) /home/notroot/trunk/src/emu/machine.c:377
#23 0x595fb47 in machine_manager::execute() /home/notroot/trunk/src/emu/mame.c:216
#24 0x5772558 in cli_frontend::execute(int, char**) /home/notroot/trunk/src/emu/clifront.c:243
#25 0x2e53834 in main /home/notroot/trunk/src/osd/sdl/sdlmain.c:332
#26 0x7fa7fd6fdde4 in __libc_start_main /build/buildd/eglibc-2.17/csu/libc-start.c:260
#27 0xd8e65c in _start (/home/notroot/trunk/mess64d+0xd8e65c)
Address 0x7fff433241c2 is located in stack of thread T0 at offset 578 in frame
#0 0x5b2f9bf in debug_view_disasm::recompute(unsigned int, int, int) /home/notroot/trunk/src/emu/debug/dvdisasm.c:333
This frame has 5 object(s):
[32, 132) 'oldbuf'
[192, 292) 'buffer'
[352, 356) 'physpcbyte'
[416, 480) 'opbuf'
[512, 576) 'argbuf' <== Memory access at offset 578 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow /home/notroot/trunk/src/emu/cpu/alto2/alto2dsm.c:227 alto2_cpu_device::disasm_disassemble(char*, unsigned int, unsigned char const*, unsigned char const*, unsigned int)
Shadow bytes around the buggy address:
0x10006865c7e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c7f0: f1 f1 f1 f1 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c800: 04 f4 f4 f4 f2 f2 f2 f2 00 00 00 00 00 00 00 00
0x10006865c810: 00 00 00 00 04 f4 f4 f4 f2 f2 f2 f2 04 f4 f4 f4
0x10006865c820: f2 f2 f2 f2 00 00 00 00 00 00 00 00 f2 f2 f2 f2
=>0x10006865c830: 00 00 00 00 00 00 00 00[f3]f3 f3 f3 00 00 00 00
0x10006865c840: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c850: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006865c880: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
ASan internal: fe
|
||||
| Steps To Reproduce | |||||
| Additional Information | |||||
| Github Commit | |||||
| Flags | |||||
| Regression Version | |||||
| Affected Sets / Systems | alto2 | ||||
|
Attached Files
|
|||||
Relationships
| There are no relationship linked to this issue. |
Notes
1
|
No.20740
Firewave Senior Tester
Nov 5, 2022, 09:19
|
No ASAN error with 0.249 on Linux. |
|---|