[Octave-bug-tracker] [bug #52118] randg: segfault with erroneous arguments

[Rik]

Update of bug #52118 (project octave):

                  Status:                    None => Confirmed              

    _______________________________________________________

Follow-up Comment #1:

Confirmed.  Even if the inputs are invalid, Octave should not segfault.  Here
is a longer backtrace from the Address Santizer.


==21650==WARNING: AddressSanitizer failed to allocate 0x0746a5288000 bytes
==21650==AddressSanitizer's allocator is terminating the process instead of
returning 0
==21650==If you don't like this behavior set allocator_may_return_null=1
==21650==AddressSanitizer CHECK failed:
../../../../src/libsanitizer/sanitizer_common/sanitizer_allocator.cc:147
"((0)) != (0)" (0x0, 0x0)
    #0 0x7fe37dc73631  (/usr/lib/x86_64-linux-gnu/libasan.so.2+0xa0631)
    #1 0x7fe37dc78613 in __sanitizer::CheckFailed(char const*, int, char
const*, unsigned long long, unsigned long long)
(/usr/lib/x86_64-linux-gnu/libasan.so.2+0xa5613)
    #2 0x7fe37dbf0425  (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x1d425)
    #3 0x7fe37dc76865  (/usr/lib/x86_64-linux-gnu/libasan.so.2+0xa3865)
    #4 0x7fe37dbf5b4d  (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x22b4d)
    #5 0x7fe37dc6c67e in operator new[](unsigned long)
(/usr/lib/x86_64-linux-gnu/libasan.so.2+0x9967e)
    #6 0x7fe37c5c3f96 in Array<double>::ArrayRep::ArrayRep(long)
liboctave/array/Array.h:159
    #7 0x7fe37ab2fd11 in Array<double>::clear(dim_vector const&)
(/home/rik/wip/Projects_Mine/octave-dbg/liboctave/.libs/liboctave.so.4+0x594d11)
    #8 0x7fe37b36c144 in octave_rand::do_nd_array(dim_vector const&, double)
liboctave/numeric/oct-rand.cc:513
    #9 0x7fe37d3392d6 in octave_rand::nd_array(dim_vector const&, double)
liboctave/numeric/oct-rand.h:169
    #10 0x7fe37d336ebe in do_rand libinterp/corefcn/rand.cc:306
    #11 0x7fe37d337c43 in Frandg(octave_value_list const&, int)
libinterp/corefcn/rand.cc:747
    #12 0x7fe37c9c5fc6 in octave_builtin::call(octave::tree_evaluator&, int,
octave_value_list const&) libinterp/octave-value/ov-builtin.cc:65
    #13 0x7fe37ccbbd4b in
octave::tree_evaluator::visit_index_expression(octave::tree_index_expression&)
libinterp/parse-tree/pt-eval.cc:1252
    #14 0x7fe37cceecc0 in
octave::tree_index_expression::accept(octave::tree_walker&)
libinterp/parse-tree/pt-idx.h:101
    #15 0x7fe37ca46a7a in
octave::tree_evaluator::evaluate(octave::tree_expression*, int)
libinterp/parse-tree/pt-eval.h:271
    #16 0x7fe37ccc151e in
octave::tree_evaluator::visit_simple_assignment(octave::tree_simple_assignment&)
libinterp/parse-tree/pt-eval.cc:2087
    #17 0x7fe37cca6cfc in
octave::tree_simple_assignment::accept(octave::tree_walker&)
libinterp/parse-tree/pt-assign.h:83
    #18 0x7fe37ca46a7a in
octave::tree_evaluator::evaluate(octave::tree_expression*, int)
libinterp/parse-tree/pt-eval.h:271
    #19 0x7fe37ccc2438 in
octave::tree_evaluator::visit_statement(octave::tree_statement&)
libinterp/parse-tree/pt-eval.cc:2211
    #20 0x7fe37cd00412 in octave::tree_statement::accept(octave::tree_walker&)
libinterp/parse-tree/pt-stmt.h:112
    #21 0x7fe37ccc2753 in
octave::tree_evaluator::visit_statement_list(octave::tree_statement_list&)
libinterp/parse-tree/pt-eval.cc:2253
    #22 0x7fe37ca47318 in
octave::tree_statement_list::accept(octave::tree_walker&)
libinterp/parse-tree/pt-stmt.h:187
    #23 0x7fe37d14f47a in octave::interpreter::main_loop()
libinterp/corefcn/interpreter.cc:974
    #24 0x7fe37d14d30d in octave::interpreter::execute()
libinterp/corefcn/interpreter.cc:695
    #25 0x7fe37c49ae8b in octave::cli_application::execute()
libinterp/octave.cc:384
    #26 0x401d7c in main src/main-cli.cc:90
    #27 0x7fe379c5982f in __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #28 0x401808 in _start
(/home/rik/wip/Projects_Mine/octave-dbg/src/.libs/lt-octave-cli+0x401808)




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?52118>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/