[Octave-bug-tracker] [bug #51533] heap-buffer-overflow in Sparse.cc-tst

[Dmitri A. Sergatskov]

Follow-up Comment #5, bug #51533 (project octave):

On "test libinterp/octave-value/ov-class.cc-tst" I get 

octave:1> test libinterp/octave-value/ov-class.cc-tst verbose
>>>>> /home/dima/src/octave/gcc_asan/libinterp/octave-value/ov-class.cc-tst
***** assert (class (1.1), "double")
***** assert (class (single (1.1)), "single")
***** assert (class (uint8 (1)), "uint8")
***** testif HAVE_JAVA; usejava ("jvm")
 jobj = javaObject ("java.lang.StringBuffer");
 assert (class (jobj), "java.lang.StringBuffer");
----- skipped test (missing feature)

***** error class ()
=================================================================
==2449==ERROR: AddressSanitizer: stack-use-after-scope on address
0x7ffce2224500 at pc 0x7f6a440bce67 bp 0x7ffce2224200 sp 0x7ffce22241f0
WRITE of size 8 at 0x7ffce2224500 thread T0
    #0 0x7f6a440bce66 in Array<octave_value>::Array()
../liboctave/array/Array.h:257
    #1 0x7f6a440bce66 in octave_value_list::octave_value_list()
../libinterp/octave-value/ovl.h:46
    #2 0x7f6a4541ceb9 in
octave::tree_evaluator::visit_identifier(octave::tree_identifier&)
../libinterp/parse-tree/pt-eval.cc:1035
    #3 0x7f6a453d8d2d in
octave::tree_evaluator::evaluate(octave::tree_expression*, int)
../libinterp/parse-tree/pt-eval.h:270
  (...deleted...)

HINT: this may be a false positive if your program uses some custom stack
unwind mechanism or swapcontext
      (longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-use-after-scope
../liboctave/array/Array.h:257 in Array<octave_value>::Array()



which I assume is false positive per the HINT. 
(I get this error in many tests).

Dmitri.
-- 


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?51533>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/