[debbugs-tracker] bug#25494: closed (sed 4.3-1 segmentation fault (core

2017-01-17 17:39 GMT+01:00 Noé Girand <address@hidden>:

Hi all,

I am sending an email to this email address as mentioned on the sed man page.

On running the following sed script

sed -r '// {
 :searchforendb
 /<\/b>/ ! {
 N
 b searchforendb
 }
 /^[ \n\t\r]*[ \n\t\r]*Par(\xc2\xa0)*[ \n\t\r]*<\/b>[ \n\t\r]*$/ d
}' sed-dump.xml

where sed-dump.xml is an UTF-8 Unicode text with CRLF line terminators and contains :

<text>
Par
 
 
 
 

</text>

I get the following :

*** Error in `sed': realloc(): invalid next size: 0x000000000209aed0 ***
======= Backtrace: =========
/usr/lib/libc.so.6(+0x70c4b)[0x7f06a69bbc4b]
/usr/lib/libc.so.6(+0x76fe6)[0x7f06a69c1fe6]
/usr/lib/libc.so.6(+0x79fcc)[0x7f06a69c4fcc]
/usr/lib/libc.so.6(realloc+0x159)[0x7f06a69c64f9]
sed[0x412786]
sed[0x409bd0]
sed[0x40ce4b]
sed[0x40e760]
sed[0x4085aa]
sed[0x405f4f]
sed[0x406c59]
sed[0x407cad]
sed[0x402d66]
/usr/lib/libc.so.6(__libc_start_main+0xf1)[0x7f06a696b291]
sed[0x402e3a]
======= Memory map: ========
00400000-0041a000 r-xp 00000000 08:05 936899 /usr/bin/sed
00619000-0061a000 r--p 00019000 08:05 936899 /usr/bin/sed
0061a000-0061b000 rw-p 0001a000 08:05 936899 /usr/bin/sed
02065000-020c8000 rw-p 00000000 00:00 0 [heap]
7f06a0000000-7f06a0021000 rw-p 00000000 00:00 0
7f06a0021000-7f06a4000000 ---p 00000000 00:00 0
7f06a64f5000-7f06a650b000 r-xp 00000000 08:05 939866 /usr/lib/libgcc_s.so.1
7f06a650b000-7f06a670a000 ---p 00016000 08:05 939866 /usr/lib/libgcc_s.so.1
7f06a670a000-7f06a670b000 r--p 00015000 08:05 939866 /usr/lib/libgcc_s.so.1
7f06a670b000-7f06a670c000 rw-p 00016000 08:05 939866 /usr/lib/libgcc_s.so.1
7f06a6746000-7f06a674a000 r-xp 00000000 08:05 928101 /usr/lib/libattr.so.1.1.0
7f06a674a000-7f06a6949000 ---p 00004000 08:05 928101 /usr/lib/libattr.so.1.1.0
7f06a6949000-7f06a694a000 r--p 00003000 08:05 928101 /usr/lib/libattr.so.1.1.0
7f06a694a000-7f06a694b000 rw-p 00004000 08:05 928101 /usr/lib/libattr.so.1.1.0
7f06a694b000-7f06a6ae0000 r-xp 00000000 08:05 920754 /usr/lib/libc-2.24.so
7f06a6ae0000-7f06a6cdf000 ---p 00195000 08:05 920754 /usr/lib/libc-2.24.so
7f06a6cdf000-7f06a6ce3000 r--p 00194000 08:05 920754 /usr/lib/libc-2.24.so
7f06a6ce3000-7f06a6ce5000 rw-p 00198000 08:05 920754 /usr/lib/libc-2.24.so
7f06a6ce5000-7f06a6ce9000 rw-p 00000000 00:00 0
7f06a6ce9000-7f06a6cf1000 r-xp 00000000 08:05 928156 /usr/lib/libacl.so.1.1.0
7f06a6cf1000-7f06a6ef0000 ---p 00008000 08:05 928156 /usr/lib/libacl.so.1.1.0
7f06a6ef0000-7f06a6ef1000 r--p 00007000 08:05 928156 /usr/lib/libacl.so.1.1.0
7f06a6ef1000-7f06a6ef2000 rw-p 00008000 08:05 928156 /usr/lib/libacl.so.1.1.0
7f06a6ef2000-7f06a6f15000 r-xp 00000000 08:05 920753 /usr/lib/ld-2.24.so
7f06a6f3d000-7f06a70d6000 r--p 00000000 08:05 968824 /usr/lib/locale/locale-archive
7f06a70d6000-7f06a70da000 rw-p 00000000 00:00 0
7f06a7113000-7f06a7114000 rw-p 00000000 00:00 0
7f06a7114000-7f06a7115000 r--p 00022000 08:05 920753 /usr/lib/ld-2.24.so
7f06a7115000-7f06a7116000 rw-p 00023000 08:05 920753 /usr/lib/ld-2.24.so
7f06a7116000-7f06a7117000 rw-p 00000000 00:00 0
7fff8fd2e000-7fff8fd4f000 rw-p 00000000 00:00 0 [stack]
7fff8fd8a000-7fff8fd8c000 r--p 00000000 00:00 0 [vvar]
7fff8fd8c000-7fff8fd8e000 r-xp 00000000 00:00 0 [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
[1] 962 abort (core dumped) sed -r sed-dump.xml

In system log file, I also get the following

Jan 17 17:26:28 noe-computer systemd[1]: Started Process Core Dump (PID 964/UID 0).
Jan 17 17:26:28 noe-computer systemd-coredump[966]: Removed old coredump core.sed.1002.6c4d9506cb364da4a3e9da9ecd778b1d.922.1484670383000000000000.lz4.
Jan 17 17:26:28 noe-computer systemd-coredump[966]: Process 962 (sed) of user 1002 dumped core.

Stack trace of thread 962:
#0 0x00007f06a697e04f raise (libc.so.6)
#1 0x00007f06a697f47a abort (libc.so.6)
#2 0x00007f06a69bbc50 __libc_message (libc.so.6)
#3 0x00007f06a69c1fe6 malloc_printerr (libc.so.6)
#4 0x00007f06a69c4fcc _int_realloc (libc.so.6)
#5 0x00007f06a69c64f9 realloc (libc.so.6)
#6 0x0000000000412786 n/a (sed)
#7 0x0000000000409bd0 n/a (sed)
#8 0x000000000040ce4b n/a (sed)
#9 0x000000000040e760 n/a (sed)
#10 0x00000000004085aa n/a (sed)
#11 0x0000000000405f4f n/a (sed)
#12 0x0000000000406c59 n/a (sed)
#13 0x0000000000407cad n/a (sed)
#14 0x0000000000402d66 n/a (sed)
#15 0x00007f06a696b291 __libc_start_main (libc.so.6)
#16 0x0000000000402e3a n/a (sed)

As requested,`sed --version` outputs the following "

sed (GNU sed) 4.3
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by Jay Fenlason, Tom Lord, Ken Pizzini,
and Paolo Bonzini.
Page de GNU sed: <http://www.gnu.org/software/sed/>.
Aide générale pour utiliser les logiciels GNU: <http://www.gnu.org/help/gethelp.fr.html>.
E-mail bug reports to: <address@hidden>.

"

This was working in my previous version of sed, sed (GNU sed) 4.2.2

For info, my glibc version is 2.24-2.

Let me know if I can help in any way, as I reproduce consistently.

Best regards,
Noe

--
Noé GIRAND
CTO de Articly
+33 6 84 72 33 94

From:	GNU bug Tracking System
Subject:	[debbugs-tracker] bug#25494: closed (sed 4.3-1 segmentation fault (core dumped) : Error in `sed': realloc(): invalid next size: 0x000000000209aed0 ***)
Date:	Sat, 21 Jan 2017 15:40:02 +0000