Re: sed bugreport

[Paolo Bonzini]

Il 30/04/2012 21:27, Posilovna Diana ha scritto:
> Hello,
> i found bug in my sed (current distribution (Debian) version).
> 
> sed --version
> GNU sed verze 4.2.1
> 
> command:
> cat kills_sed_small_ | sed 's;..-..-.... \(..:..\):.. [<>]
> \([^!]*\)!~;/1 </2> ;'
> 
> output:
> /1 </2> address@hidden: dawwwwm: jakto ze uz nehrajes draw
> something??? :D

This is a bug in glibc.

Thanks for the bug report, I will look at it.

Can you reply with the output of "env"?

Paolo

> *** glibc detected *** sed: double free or corruption (!prev):
> 0x09558ff8 ***
> ======= Backtrace: =========
> /lib/i686/cmov/libc.so.6(+0x6b381)[0xb768c381]
> /lib/i686/cmov/libc.so.6(+0x6cbd8)[0xb768dbd8]
> /lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb7690cbd]
> /lib/i686/cmov/libc.so.6(+0xb1630)[0xb76d2630]
> /lib/i686/cmov/libc.so.6(+0xb3c59)[0xb76d4c59]
> /lib/i686/cmov/libc.so.6(re_search+0x34)[0xb76d5194]
> sed[0x804f31b]
> sed[0x804e0ed]
> sed[0x804f0d8]
> sed[0x8049fd6]
> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7637ca6]
> sed[0x80498f1]
> ======= Memory map: ========
> 08048000-08055000 r-xp 00000000 fe:02 309477     /bin/sed
> 08055000-08056000 rw-p 0000c000 fe:02 309477     /bin/sed
> 08056000-0805b000 rw-p 00000000 00:00 0
> 0954e000-0956f000 rw-p 00000000 00:00 0          [heap]
> b7400000-b7421000 rw-p 00000000 00:00 0
> b7421000-b7500000 ---p 00000000 00:00 0
> b757f000-b759c000 r-xp 00000000 fe:02 179171     /lib/libgcc_s.so.1
> b759c000-b759d000 rw-p 0001c000 fe:02 179171     /lib/libgcc_s.so.1
> b75a5000-b75a6000 rw-p 00000000 00:00 0
> b75a6000-b761b000 r--p 00000000 fe:02 440499 /usr/lib/locale/locale-archive
> b761b000-b761c000 rw-p 00000000 00:00 0
> b761c000-b761e000 r-xp 00000000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b761e000-b761f000 r--p 00001000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b761f000-b7620000 rw-p 00002000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b7620000-b7621000 rw-p 00000000 00:00 0
> b7621000-b7761000 r-xp 00000000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7761000-b7762000 ---p 00140000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7762000-b7764000 r--p 00140000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7764000-b7765000 rw-p 00142000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7765000-b7768000 rw-p 00000000 00:00 0
> b7768000-b7781000 r-xp 00000000 fe:02 179207     /lib/libselinux.so.1
> b7781000-b7782000 r--p 00018000 fe:02 179207     /lib/libselinux.so.1
> b7782000-b7783000 rw-p 00019000 fe:02 179207     /lib/libselinux.so.1
> b7783000-b7784000 rw-p 00000000 00:00 0
> b7784000-b778b000 r--s 00000000 fe:02 422226
> /usr/lib/gconv/gconv-modules.cache
> b778b000-b778d000 rw-p 00000000 00:00 0
> b778d000-b778e000 r-xp 00000000 00:00 0          [vdso]
> b778e000-b77a9000 r-xp 00000000 fe:02 254161     /lib/ld-2.11.3.so
> b77a9000-b77aa000 r--p 0001b000 fe:02 254161     /lib/ld-2.11.3.so
> b77aa000-b77ab000 rw-p 0001c000 fe:02 254161     /lib/ld-2.11.3.so
> bfe88000-bfea9000 rw-p 00000000 00:00 0          [stack]
> Neúspěšně ukončen (SIGABRT)
> 
> 
> sed in gdb:
> 
> gdb sed
> GNU gdb (GDB) 7.0.1-debian
> Copyright (C) 2009 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later
> <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
> and "show warranty" for details.
> This GDB was configured as "i486-linux-gnu".
> For bug reporting instructions, please see:
> <http://www.gnu.org/software/gdb/bugs/>...
> Reading symbols from /bin/sed...(no debugging symbols found)...done.
> (gdb) run 's;..-..-.... \(..:..\):.. [<>] \([^!]*\)!~;/1 </2> ;' <
> kills_sed_small_
> Starting program: /bin/sed 's;..-..-.... \(..:..\):.. [<>]
> \([^!]*\)!~;/1 </2> ;' < kills_sed_small_
> /1 </2> address@hidden: dawwwwm: jakto ze uz nehrajes draw
> something??? :D
> *** glibc detected *** /bin/sed: double free or corruption (!prev):
> 0x08065ff8 ***
> ======= Backtrace: =========
> /lib/i686/cmov/libc.so.6(+0x6b381)[0xb7ee1381]
> /lib/i686/cmov/libc.so.6(+0x6cbd8)[0xb7ee2bd8]
> /lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb7ee5cbd]
> /lib/i686/cmov/libc.so.6(+0xb1630)[0xb7f27630]
> /lib/i686/cmov/libc.so.6(+0xb3c59)[0xb7f29c59]
> /lib/i686/cmov/libc.so.6(re_search+0x34)[0xb7f2a194]
> /bin/sed[0x804f31b]
> /bin/sed[0x804e0ed]
> /bin/sed[0x804f0d8]
> /bin/sed[0x8049fd6]
> /lib/i686/cmov/libc.so.6(__libc_start_main+0xe6)[0xb7e8cca6]
> /bin/sed[0x80498f1]
> ======= Memory map: ========
> 08048000-08055000 r-xp 00000000 fe:02 309477     /bin/sed
> 08055000-08056000 rw-p 0000c000 fe:02 309477     /bin/sed
> 08056000-0807c000 rw-p 00000000 00:00 0          [heap]
> b7c00000-b7c21000 rw-p 00000000 00:00 0
> b7c21000-b7d00000 ---p 00000000 00:00 0
> b7dd4000-b7df1000 r-xp 00000000 fe:02 179171     /lib/libgcc_s.so.1
> b7df1000-b7df2000 rw-p 0001c000 fe:02 179171     /lib/libgcc_s.so.1
> b7dfa000-b7dfb000 rw-p 00000000 00:00 0
> b7dfb000-b7e70000 r--p 00000000 fe:02 440499 /usr/lib/locale/locale-archive
> b7e70000-b7e71000 rw-p 00000000 00:00 0
> b7e71000-b7e73000 r-xp 00000000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b7e73000-b7e74000 r--p 00001000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b7e74000-b7e75000 rw-p 00002000 fe:02 439886 /lib/i686/cmov/libdl-2.11.3.so
> b7e75000-b7e76000 rw-p 00000000 00:00 0
> b7e76000-b7fb6000 r-xp 00000000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7fb6000-b7fb7000 ---p 00140000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7fb7000-b7fb9000 r--p 00140000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7fb9000-b7fba000 rw-p 00142000 fe:02 442473 /lib/i686/cmov/libc-2.11.3.so
> b7fba000-b7fbd000 rw-p 00000000 00:00 0
> b7fbd000-b7fd6000 r-xp 00000000 fe:02 179207     /lib/libselinux.so.1
> b7fd6000-b7fd7000 r--p 00018000 fe:02 179207     /lib/libselinux.so.1
> b7fd7000-b7fd8000 rw-p 00019000 fe:02 179207     /lib/libselinux.so.1
> b7fd8000-b7fd9000 rw-p 00000000 00:00 0
> b7fd9000-b7fe0000 r--s 00000000 fe:02 422226
> /usr/lib/gconv/gconv-modules.cache
> b7fe0000-b7fe2000 rw-p 00000000 00:00 0
> b7fe2000-b7fe3000 r-xp 00000000 00:00 0          [vdso]
> b7fe3000-b7ffe000 r-xp 00000000 fe:02 254161     /lib/ld-2.11.3.so
> b7ffe000-b7fff000 r--p 0001b000 fe:02 254161     /lib/ld-2.11.3.so
> b7fff000-b8000000 rw-p 0001c000 fe:02 254161     /lib/ld-2.11.3.so
> bffdf000-c0000000 rw-p 00000000 00:00 0          [stack]
> 
> Program received signal SIGABRT, Aborted.
> 0xb7fe2424 in __kernel_vsyscall ()
> (gdb) bt
> #0  0xb7fe2424 in __kernel_vsyscall ()
> #1  0xb7ea0781 in raise () from /lib/i686/cmov/libc.so.6
> #2  0xb7ea3bb2 in abort () from /lib/i686/cmov/libc.so.6
> #3  0xb7ed7285 in ?? () from /lib/i686/cmov/libc.so.6
> #4  0xb7ee1381 in ?? () from /lib/i686/cmov/libc.so.6
> #5  0xb7ee2bd8 in ?? () from /lib/i686/cmov/libc.so.6
> #6  0xb7ee5cbd in free () from /lib/i686/cmov/libc.so.6
> #7  0xb7f27630 in ?? () from /lib/i686/cmov/libc.so.6
> #8  0xb7f29c59 in ?? () from /lib/i686/cmov/libc.so.6
> #9  0xb7f2a194 in re_search () from /lib/i686/cmov/libc.so.6
> #10 0x0804f31b in ?? ()
> #11 0x0804e0ed in ?? ()
> #12 0x0804f0d8 in ?? ()
> #13 0x08049fd6 in ?? ()
> #14 0xb7e8cca6 in __libc_start_main () from /lib/i686/cmov/libc.so.6
> #15 0x080498f1 in ?? ()
> (gdb)
> 
> 
> 
> file kills_sed_small_ attached; content (2 lines):
> --satrt of kills_sed_small
> 11-04-2012 18:02:03 < address@hidden: dawwwwm: jakto ze uz
> nehrajes draw something??? :D
> 11-04-2012 18:02:24 > dawwwwm: Tewwok: aaaa, ja vedel ze jsem na nec
> --end of kills_sed_small
> 
> my system:
> uname -a
> Linux eliska 3.3.2-my-compilation #3 SMP Mon Apr 16 18:16:37 CEST 2012
> i686 GNU/Linux
> 
> cat /proc/cpuinfo
> processor    : 0
> vendor_id    : GenuineIntel
> cpu family    : 15
> model        : 2
> model name    : Intel(R) Xeon(TM) CPU 2.40GHz
> stepping    : 7
> microcode    : 0x34
> cpu MHz        : 2392.213
> cache size    : 512 KB
> physical id    : 0
> siblings    : 1
> core id        : 0
> cpu cores    : 1
> apicid        : 0
> initial apicid    : 0
> fdiv_bug    : no
> hlt_bug        : no
> f00f_bug    : no
> coma_bug    : no
> fpu        : yes
> fpu_exception    : yes
> cpuid level    : 2
> wp        : yes
> flags        : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
> cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe pebs bts
> cid xtpr
> bogomips    : 4784.42
> clflush size    : 64
> cache_alignment    : 128
> address sizes    : 36 bits physical, 32 bits virtual
> power management:
> 
> processor    : 1
> vendor_id    : GenuineIntel
> cpu family    : 15
> model        : 2
> model name    : Intel(R) Xeon(TM) CPU 2.40GHz
> stepping    : 9
> microcode    : 0xf
> cpu MHz        : 2392.213
> cache size    : 512 KB
> physical id    : 3
> siblings    : 1
> core id        : 0
> cpu cores    : 1
> apicid        : 6
> initial apicid    : 6
> fdiv_bug    : no
> hlt_bug        : no
> f00f_bug    : no
> coma_bug    : no
> fpu        : yes
> fpu_exception    : yes
> cpuid level    : 2
> wp        : yes
> flags        : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca
> cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe pebs bts
> cid xtpr
> bogomips    : 4784.78
> clflush size    : 64
> cache_alignment    : 128
> address sizes    : 36 bits physical, 32 bits virtual
> power management:
> 
> 
> Thanks for your interest,
> Roman Diba, Czech Republic.