Ticket UUID: | 50750c735a16174f3a8cfce34109f8655138a980 | |||
Title: | memory faults in zlib-12.2 | |||
Type: | Bug | Version: | 8.6.7 | |
Submitter: | dgp | Created on: | 2017-03-10 16:55:02 | |
Subsystem: | 57. zlib | Assigned To: | dkf | |
Priority: | 9 Immediate | Severity: | Important | |
Status: | Closed | Last Modified: | 2017-04-27 10:48:03 | |
Resolution: | Fixed | Closed By: | dkf | |
Closed on: | 2017-04-27 10:48:03 | |||
Description: |
zlib.test ---- zlib-12.2 start ==308== Syscall param write(buf) points to uninitialised byte(s) ==308== at 0x525B420: __write_nocancel (syscall-template.S:81) ==308== by 0x596BFD: FileOutputProc (tclUnixChan.c:302) ==308== by 0x527FA4: ChanWrite (tclIO.c:517) ==308== by 0x52BAFE: Tcl_WriteRaw (tclIO.c:4039) ==308== by 0x595341: ZlibTransformOutput (tclZlib.c:3134) ==308== by 0x527FA4: ChanWrite (tclIO.c:517) ==308== by 0x52A274: FlushChannel (tclIO.c:2747) ==308== by 0x532F37: MBWrite (tclIO.c:9354) ==308== Address 0xd5f43e5 is 21 bytes inside a block of size 4,096 alloc'd ==308== at 0x4C27BE3: malloc (vg_replace_malloc.c:299) ==308== by 0x5D1062: TclpAlloc (tclAlloc.c:699) ==308== by 0x43C1F0: Tcl_Alloc (tclCkalloc.c:1059) ==308== by 0x596322: ZlibStackChannelTransform (tclZlib.c:3672) ==308== by 0x593E82: ZlibPushSubcmd (tclZlib.c:2491) ==308== by 0x593497: ZlibCmd (tclZlib.c:2158) ==308== by 0x42FB95: Dispatch (tclBasic.c:4357) ==308== by 0x42FC1D: TclNRRunCallbacks (tclBasic.c:4390) ==308== ++++ zlib-12.2 PASSED | |||
User Comments: |
dkf added on 2017-04-27 10:48:03:
Fix applied. A deep problem was that zlib-12.2 was very wrong anyway, which was stopping us from noticing that the tested code was failing. The aspect added on 2017-03-26 01:41:24: fossil coordinates? I can't find this with valgrind or asan on core-8-6-branch or core-8-6-7-rc. dgp added on 2017-03-22 17:36:48: This is a new failure in 8.6.7. I don't want to release it unless an expert tells me that fixing it is really infeasible in a short term. dgp added on 2017-03-10 18:03:24: I see where the problem is in ZlibTransformOutput() but I don't have the knowledge to know how to fix. dgp added on 2017-03-10 16:55:41: alert dkf in case it's obvious to him before I can figure it out. |