Attachment 81374 Details for Bug 65986 – backtrace with weston compiled with ASAN

backtrace with weston compiled with ASAN

kill_terminal.txt (text/plain), 3.80 KB, created by Hardening on 2013-06-24 22:24:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Hardening

Created: 2013-06-24 22:24:08 UTC

Size: 3.80 KB

patch

obsolete

>=================================================================
>==8688== ERROR: AddressSanitizer: heap-use-after-free on address 0x7fe986a89d90 at pc 0x413f84 bp 0x7fff61f48bb0 sp 0x7fff61f48ba8
>READ of size 4 at 0x7fe986a89d90 thread T0
>    #0 0x413f83 in weston_surface_from_global_float /home/david/dev/git/weston/output/src/../../src/compositor.c:763
>    #1 0x4140b9 in weston_surface_from_global_fixed /home/david/dev/git/weston/output/src/../../src/compositor.c:794
>    #2 0x414ca3 in weston_compositor_pick_surface /home/david/dev/git/weston/output/src/../../src/compositor.c:948
>    #3 0x424bc1 in default_grab_focus /home/david/dev/git/weston/output/src/../../src/input.c:109
>    #4 0x41f8ae in notify_motion_absolute /home/david/dev/git/weston/output/src/../../src/input.c:661
>    #5 0x7fe982e8f1f7 in xf_mouseEvent /home/david/dev/git/weston/output/src/../../src/compositor-rdp.c:780
>    #6 0x7fe98281b6e8 in fastpath_recv_input_event_mouse /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:533 (discriminator 1)
>    #7 0x7fe98281ba31 in fastpath_recv_input_event /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:601
>    #8 0x7fe98281bb7a in fastpath_recv_inputs /home/david/dev/git/FreeRDP/libfreerdp/core/fastpath.c:647
>    #9 0x7fe98282be5c in peer_recv_fastpath_pdu /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:248
>    #10 0x7fe98282beab in peer_recv_pdu /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:256
>    #11 0x7fe98282c19c in peer_recv_callback /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:336
>    #12 0x7fe98281e401 in transport_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/transport.c:741
>    #13 0x7fe982819630 in rdp_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/rdp.c:968
>    #14 0x7fe98282b7de in freerdp_peer_check_fds /home/david/dev/git/FreeRDP/libfreerdp/core/peer.c:63
>    #15 0x7fe982e8f56a in rdp_client_activity /home/david/dev/git/weston/output/src/../../src/compositor-rdp.c:617
>    #16 0x7fe9867b5d22 in wl_event_loop_dispatch /home/david/dev/git/wayland_/output/src/../../src/event-loop.c:421
>    #17 0x86b235c000000000
>0x7fe986a89d90 is located 336 bytes inside of 840-byte region [0x7fe986a89c40,0x7fe986a89f88)
>freed by thread T0 here:
>    #0 0x449cc0 in __interceptor_free ??:?
>    #1 0x7fe9867b7af5 in for_each_helper /home/david/dev/git/wayland_/output/src/../../src/wayland-util.c:353
>previously allocated by thread T0 here:
>    #0 0x449df1 in calloc ??:?
>    #1 0x4114cc in weston_surface_create /home/david/dev/git/weston/output/src/../../src/compositor.c:275
>    #2 0x41b7f9 in compositor_create_surface /home/david/dev/git/weston/output/src/../../src/compositor.c:1685
>    #3 0x7fe984d6cc17 in ?? ??:0
>Shadow byte and word:
>  0x1ffd30d513b2: fd
>  0x1ffd30d513b0: fd fd fd fd fd fd fd fd
>More shadow bytes:
>  0x1ffd30d51390: fd fd fd fd fd fd fd fd
>  0x1ffd30d51398: fd fd fd fd fd fd fd fd
>  0x1ffd30d513a0: fd fd fd fd fd fd fd fd
>  0x1ffd30d513a8: fd fd fd fd fd fd fd fd
>=>0x1ffd30d513b0: fd fd fd fd fd fd fd fd
>  0x1ffd30d513b8: fd fd fd fd fd fd fd fd
>  0x1ffd30d513c0: fd fd fd fd fd fd fd fd
>  0x1ffd30d513c8: fd fd fd fd fd fd fd fd
>  0x1ffd30d513d0: fd fd fd fd fd fd fd fd
>Stats: 71M malloced (9M for red zones) by 23086 calls
>Stats: 63M realloced by 2079 calls
>Stats: 64M freed by 17806 calls
>Stats: 3M really freed by 10384 calls
>Stats: 81M (20744 full pages) mmaped in 147 calls
>  mmaps   by size class: 7:16380; 8:6141; 9:2046; 10:511; 11:255; 12:128; 13:128; 14:32; 15:64; 16:984; 17:4; 18:4; 22:2;
>  mallocs by size class: 7:14627; 8:5381; 9:1391; 10:186; 11:135; 12:119; 13:135; 14:25; 15:64; 16:1013; 17:4; 18:4; 22:2;
>  frees   by size class: 7:9944; 8:4924; 9:1334; 10:172; 11:93; 12:113; 13:129; 14:24; 15:61; 16:1012;
>  rfrees  by size class: 7:6472; 8:3484; 9:191; 10:88; 11:33; 12:23; 13:13; 14:6; 15:40; 16:34;
>Stats: malloc large: 1087 small slow: 204
>==8688== ABORTING
>

Actions: View

Attachments on bug 65986: 81138 | 81374

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.