Hi,
probably an optimization problem? Given the test program
====
extern void g_type_init(void);
int main(int an, char **ac) {
(void)g_type_init();
return 0;
}
====
I get this backtrace:
====
#0 g_bsearch_array_create ()
at
/build/buildd-glib2.0_2.25.12-1-i386-5iccNM/glib2.0-2.25.12/glib/gbsearcharray.h:137
#1 g_signal_init ()
at
/build/buildd-glib2.0_2.25.12-1-i386-5iccNM/glib2.0-2.25.12/gobject/gsignal.c:775
#2 0xb7fafaef in g_type_init_with_debug_flags (debug_flags=G_TYPE_DEBUG_NONE)
at
/build/buildd-glib2.0_2.25.12-1-i386-5iccNM/glib2.0-2.25.12/gobject/gtype.c:4349
#3 0xb7fafc2e in g_type_init ()
at
/build/buildd-glib2.0_2.25.12-1-i386-5iccNM/glib2.0-2.25.12/gobject/gtype.c:4367
#4 0x080484bf in main (an=1, ac=0xbffff614) at x.c:4
====
Now a close look at g_signal_init():
#1 C Source
==== g_signal_init()
[...]
g_handler_list_bsa_ht = g_hash_table_new (g_direct_hash, NULL);
g_signal_key_bsa = g_bsearch_array_create (&g_signal_key_bconfig);
[...]
==== [inline] g_bsearch_array_create()
static inline GBSearchArray*
g_bsearch_array_create (const GBSearchConfig *bconfig)
{
GBSearchArray *barray;
guint size;
g_return_val_if_fail (bconfig != NULL, NULL);
size = sizeof (GBSearchArray) + bconfig->sizeof_node;
if (bconfig->flags & G_BSEARCH_ARRAY_ALIGN_POWER2)
size = G_BSEARCH_UPPER_POWER2 (size);
barray = (GBSearchArray *) g_malloc (size);
memset (barray, 0, sizeof (GBSearchArray));
return barray;
}
====
#2 Assembler
==== <g_signal_init>
[...]
0xb7fa5297 <+167>: mov eax,DWORD PTR [ebx-0x30]
0xb7fa529d <+173>: mov DWORD PTR [esp+0x4],0x0
0xb7fa52a5 <+181>: mov DWORD PTR [esp],eax
0xb7fa52a8 <+184>: call 0xb7f8c714 <g_hash_table_...@plt>
0xb7fa52ad <+189>: mov DWORD PTR [esp],0x0
0xb7fa52b4 <+196>: mov DWORD PTR [ebx+0x504],eax
0xb7fa52ba <+202>: call 0xb7f8c614 <g_mal...@plt>
=> 0xb7fa52bf <+207>: mov DWORD PTR [eax],0x0
0xb7fa52c5 <+213>: mov DWORD PTR [eax+0x4],0x0
[...]
====
This is effectively "*(GBSearchArray *)g_malloc(0) = {0, 0}" and MUST fail.
(Where the rest of the inlined function has gone is beyond my comprehension.)
Recompiling the package without optimization makes g_bsearch_array_create() a
proper function (no inlining), the generated assembler looks good, and the
bug disappears.
Regards,
Jan
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
