From: Don Breazeal <donb@codesourcery.com>
To: <gdb-patches@sourceware.org>
Subject: [PATCH] Fix '-data-read-memory-bytes' typo/assertion
Date: Thu, 19 Nov 2015 00:53:00 -0000 [thread overview]
Message-ID: <1447894382-1469-1-git-send-email-donb@codesourcery.com> (raw)
This patch fixes a typo in target.c:read_memory_robust, where
it calls read_whatever_is_readable with the function arguments
in the wrong order. Depending on the address being read, it
can cause an xmalloc with a huge size, resulting in an assertion
failure, or just read something other than what was requested.
The problem only arises when GDB is handling an MI
"-data-read-memory-bytes" request and the initial target_read returns
an error status. Note that read_memory_robust is only called from
the MI code.
Function definition:
static void
read_whatever_is_readable (struct target_ops *ops,
const ULONGEST begin, const ULONGEST end,
int unit_size,
VEC(memory_read_result_s) **result)
Function call:
read_whatever_is_readable (ops, offset + xfered_total, unit_size,
offset + xfered_total + to_read, &result);
If we debug gdb, generate the error, and break just before the call to
read_whatever_is_readable, we see:
# Generate an error by trying to read a bogus address in the GDB
# that is under debug.
(gdb) interpreter-exec mi "-data-read-memory-bytes 1073741752 216"
# GDB-under-debug stops at the breakpoint on the call to
# read_whatever_is_readable.
Breakpoint 1, read_memory_robust (ops=0xe70150, offset=1073741752, len=216)
at /scratch/dbreazea/sandbox/gdb-5611/binutils-gdb/gdb/target.c:1825
1825 read_whatever_is_readable (ops, offset + xfered_total, unit_size,
(top) p unit_size
$1 = 1
# Step into the function.
(top) step
read_whatever_is_readable (ops=0xe70150, begin=1073741752, end=1,
unit_size=1073741968, result=0x7fffffffdd40)
at /scratch/dbreazea/sandbox/gdb-5611/binutils-gdb/gdb/target.c:1658
1658 gdb_byte *buf = (gdb_byte *) xmalloc (end - begin);
# unit_size was passed as 'end', and we are going to xmalloc a large
# number and assert.
(top) p end-begin
$2 = 18446744072635809865
(top) c
Continuing.
"/scratch/dbreazea/sandbox/gdb-5611/binutils-gdb/gdb/utils.c:1072: internal-error: virtual memory exhausted.\nA problem internal to GDB has been detected,\nfurther debugging may prove unreliable.\nQuit this debugging session? (y or n) "
# With the fixed version, (end - begin) gives the 'len' passed to
# read_memory_robust and specified by -data-read-memory-bytes
(top) p end-begin
$2 = 216
Tested on native x86_64 Linux with the gdb.mi tests.
OK?
thanks
--Don
gdb/
2015-11-18 Don Breazeal <donb@codesourcery.com>
* gdb/target.c (read_memory_robust): Call
read_whatever_is_readable with arguments in the correct order.
---
gdb/target.c | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
diff --git a/gdb/target.c b/gdb/target.c
index 93786c3..950a1b7 100644
--- a/gdb/target.c
+++ b/gdb/target.c
@@ -1822,8 +1822,9 @@ read_memory_robust (struct target_ops *ops,
/* Got an error reading full chunk. See if maybe we can read
some subrange. */
xfree (buffer);
- read_whatever_is_readable (ops, offset + xfered_total, unit_size,
- offset + xfered_total + to_read, &result);
+ read_whatever_is_readable (ops, offset + xfered_total,
+ offset + xfered_total + to_read,
+ unit_size, &result);
xfered_total += to_read;
}
else
--
1.8.1.1
next reply other threads:[~2015-11-19 0:53 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-11-19 0:53 Don Breazeal [this message]
2015-11-19 13:27 ` Simon Marchi
2015-11-19 23:06 ` Pedro Alves
2015-11-20 18:02 ` [pushed][PATCH] " Don Breazeal
2016-02-03 12:37 ` Thomas Preud'homme
2016-02-04 18:23 ` Don Breazeal
2016-02-04 22:55 ` Don Breazeal
2016-02-04 23:02 ` Pedro Alves
2016-02-05 3:04 ` Thomas Preud'homme
2016-02-11 15:31 ` Don Breazeal
2016-02-15 4:58 ` Thomas Preud'homme
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1447894382-1469-1-git-send-email-donb@codesourcery.com \
--to=donb@codesourcery.com \
--cc=gdb-patches@sourceware.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox