http://gcc.gnu.org/bugzilla/show_bug.cgi?id=55679



--- Comment #1 from Jack Howarth <howarth at nitro dot med.uc.edu> 2012-12-13 
22:16:22 UTC ---

=================================================================

==47584== ERROR: AddressSanitizer: global-buffer-overflow on address 0x0000214a

at pc 0x1ba6 bp 0xbfffc9c8 sp 0xbfffc9bc

READ of size 1 at 0x0000214a thread T0

    #0 0x1ba5

(/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/./global-overflow-1.exe+0x1ba5)

    #1 0x19c4

(/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/./global-overflow-1.exe+0x19c4)

    #2 0x0

(/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/./global-overflow-1.exe+0x0)

0x0000214a is located 0 bytes to the right of global variable 'YYY

(/sw/src/fink.build/gcc48-4.8.0-1000/gcc-4.8-20121213/gcc/testsuite/c-c++-common/asan/global-overflow-1.c)'

(0x2140) of size 10

  'YYY

(/sw/src/fink.build/gcc48-4.8.0-1000/gcc-4.8-20121213/gcc/testsuite/c-c++-common/asan/global-overflow-1.c)'

is ascii string ''

Shadow byte and word:

  0x20000429: 2

  0x20000428: 00 02 f9 f9

More shadow bytes:

  0x20000418: 00 00 00 00

  0x2000041c: 00 00 00 00

  0x20000420: 00 02 f9 f9

  0x20000424: f9 f9 f9 f9

=>0x20000428: 00 02 f9 f9

  0x2000042c: f9 f9 f9 f9

  0x20000430: 00 02 f9 f9

  0x20000434: f9 f9 f9 f9

  0x20000438: 00 00 00 00

Stats: 0M malloced (0M for red zones) by 0 calls

Stats: 0M realloced by 0 calls

Stats: 0M freed by 0 calls

Stats: 0M really freed by 0 calls

Stats: 0M (0 full pages) mmaped in 0 calls

  mmaps   by size class:

  mallocs by size class:

  frees   by size class:

  rfrees  by size class:

Stats: malloc large: 0 small slow: 0

==47584== ABORTING

Executing on host: addr2line -f -e

/sw/src/fink.build/gcc48-4.8.0-1000/darwin_objdir/gcc/testsuite/gcc/./global-overflow-1.exe

0x1ba5 0x19c4 0x0   (timeout = 300)

PASS: c-c++-common/asan/global-overflow-1.c  -O0  execution test

PASS: c-c++-common/asan/global-overflow-1.c  -O0  output pattern test, READ of

size 1 at 0x[0-9a-f]+ thread T0.*(

|^M

|^M)    #0 0x[0-9a-f]+ (in _*main ([^

^M]*global-overflow-1.c:15|[^

^M]*:0)|[(])[^

^M]*(

|^M

|^M).*0x[0-9a-f]+ is located 0 bytes to the right of global variable.*YYY[^

^M]* of size 10[^

^M]*(

|^M

|^M)

Reply via email to