From: Simon Marchi <simon.marchi@efficios.com>
To: gdb-patches@sourceware.org
Cc: Simon Marchi <simon.marchi@efficios.com>
Subject: [PATCH 1/2] gdb: fix crash when pretty printing anonymous struct with base class
Date: Mon, 17 Aug 2026 10:59:01 -0400 [thread overview]
Message-ID: <20260817145907.142300-1-simon.marchi@efficios.com> (raw)
As I was reviewing another patch, I was wondering if we allowed
type->name() to be nullptr. The answer is yes, but there are some spots
that don't check for nullptr, when they should. Claude came up with a
reproducer that inspired the included test case. It is arguably a
corner case, but it makes GDB crash.
The crash happens when trying to pretty-print (with "set print pretty
on") a value of an anonymous struct type that has a base. Given this:
struct base
{
int a;
};
struct : base
{
int b;
} v4 = { { 1 }, 2 };
We get:
$ ./gdb -nx -q --data-directory=data-directory testsuite/outputs/gdb.cp/anon-struct/anon-struct -ex "with print pretty -- p v4"
Reading symbols from testsuite/outputs/gdb.cp/anon-struct/anon-struct...
$1 = {
<base> = {
a = 1
},
/home/smarchi/src/binutils-gdb/gdb/ui-file.h:77:30: runtime error: null pointer passed as argument 1, which is declared to never be null
The crash happens here:
#4 0x00007ffff600dec8 in __ubsan_handle_nonnull_arg_abort () from /usr/lib/libubsan.so.1
#5 0x00005555637daa35 in ui_file::puts (this=0x7c1ff1c022d0, str=0x0) at /home/smarchi/src/binutils-gdb/gdb/ui-file.h:77
#6 0x0000555566f2b0ab in gdb_puts (linebuffer=0x0, stream=0x7c1ff1c022d0) at /home/smarchi/src/binutils-gdb/gdb/utils.c:1912
#7 0x00005555644e5cd4 in cp_print_value_fields (val=0x7d0ff1c2aa00, stream=0x7c1ff1c022d0, recurse=0, options=0x7bfff094acb0, dont_print_vb=0x0, dont_print_statmem=0) at /home/smarchi/src/binutils-gdb/gdb/cp-valprint.c:213
#8 0x00005555640de708 in c_value_print_struct (val=0x7d0ff1c2aa00, stream=0x7c1ff1c022d0, recurse=0, options=0x7bfff094acb0) at /home/smarchi/src/binutils-gdb/gdb/c-valprint.c:385
#9 0x00005555640df215 in c_value_print_inner (val=0x7d0ff1c2aa00, stream=0x7c1ff1c022d0, recurse=0, options=0x7bfff094acb0) at /home/smarchi/src/binutils-gdb/gdb/c-valprint.c:441
#10 0x000055556563828c in language_defn::value_print_inner (this=0x5555734a0700 <cplus_language_defn>, val=0x7d0ff1c2aa00, stream=0x7c1ff1c022d0, recurse=0, options=0x7bfff094acb0) at /home/smarchi/src/binutils-gdb/gdb/language.c:658
#11 0x0000555566fb7749 in common_val_print (value=0x7d0ff1c2aa00, stream=0x7c1ff1c022d0, recurse=0, options=0x7bfff094aa70, language=0x5555734a0700 <cplus_language_defn>) at /home/smarchi/src/binutils-gdb/gdb/valprint.c:1120
when we try to print the nullptr type name:
if (options->prettyformat)
{
gdb_printf (stream, "\n");
print_spaces (2 + 2 * recurse, stream);
gdb_puts ("members of ", stream);
gdb_puts (type->name (), stream);
gdb_puts (":", stream);
}
Fix it by using type->safe_name() instead of type->name(). This results
in:
$1 = {
<base> = {
a = 1
},
members of <unnamed type>:
b = 2
}
Claude pointed out that p-valprint.c has more or less the same code, so
I changed it there too, but I did not write a test for that one.
Change-Id: Ibc4541bf04b7239e31b8401aa86466a6807e89d5
---
gdb/cp-valprint.c | 2 +-
gdb/p-valprint.c | 2 +-
gdb/testsuite/gdb.cp/anon-struct-with-base.cc | 49 ++++++++++++++
.../gdb.cp/anon-struct-with-base.exp | 65 +++++++++++++++++++
4 files changed, 116 insertions(+), 2 deletions(-)
create mode 100644 gdb/testsuite/gdb.cp/anon-struct-with-base.cc
create mode 100644 gdb/testsuite/gdb.cp/anon-struct-with-base.exp
diff --git a/gdb/cp-valprint.c b/gdb/cp-valprint.c
index 349a0d6bf9e9..d450e90e1e1d 100644
--- a/gdb/cp-valprint.c
+++ b/gdb/cp-valprint.c
@@ -210,7 +210,7 @@ cp_print_value_fields (struct value *val, struct ui_file *stream,
gdb_printf (stream, "\n");
print_spaces (2 + 2 * recurse, stream);
gdb_puts ("members of ", stream);
- gdb_puts (type->name (), stream);
+ gdb_puts (type->safe_name (), stream);
gdb_puts (":", stream);
}
}
diff --git a/gdb/p-valprint.c b/gdb/p-valprint.c
index f64c1069b531..2f913a3da150 100644
--- a/gdb/p-valprint.c
+++ b/gdb/p-valprint.c
@@ -564,7 +564,7 @@ pascal_object_print_value_fields (struct value *val, struct ui_file *stream,
gdb_printf (stream, "\n");
print_spaces (2 + 2 * recurse, stream);
gdb_puts ("members of ", stream);
- gdb_puts (type->name (), stream);
+ gdb_puts (type->safe_name (), stream);
gdb_puts (": ", stream);
}
}
diff --git a/gdb/testsuite/gdb.cp/anon-struct-with-base.cc b/gdb/testsuite/gdb.cp/anon-struct-with-base.cc
new file mode 100644
index 000000000000..474473abb666
--- /dev/null
+++ b/gdb/testsuite/gdb.cp/anon-struct-with-base.cc
@@ -0,0 +1,49 @@
+/* This testcase is part of GDB, the GNU debugger.
+
+ Copyright 2026 Free Software Foundation, Inc.
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>. */
+
+struct base_data
+{
+ int a;
+};
+
+struct base_no_data
+{
+};
+
+struct : base_data
+{
+ int b;
+} v_data_base_data = { { 1 }, 2 };
+
+struct : base_data
+{
+} v_no_data_base_data = { { 3 } };
+
+struct : base_no_data
+{
+ int c;
+} v_data_base_no_data = { {}, 4 };
+
+struct : base_no_data
+{
+} v_no_data_base_no_data = {};
+
+int
+main ()
+{
+ return 0;
+}
diff --git a/gdb/testsuite/gdb.cp/anon-struct-with-base.exp b/gdb/testsuite/gdb.cp/anon-struct-with-base.exp
new file mode 100644
index 000000000000..2ff7036198a2
--- /dev/null
+++ b/gdb/testsuite/gdb.cp/anon-struct-with-base.exp
@@ -0,0 +1,65 @@
+# Copyright 2026 Free Software Foundation, Inc.
+
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+
+# Test printing a value whose type is an unnamed struct with a base class.
+
+standard_testfile .cc
+
+if {[prepare_for_testing "failed to prepare" $testfile $srcfile \
+ {debug c++}]} {
+ return
+}
+
+gdb_test "with print pretty off -- print v_data_base_data" \
+ "$::valnum_re = \{<base_data> = \{a = 1\}, b = 2\}"
+
+gdb_test "with print pretty off -- print v_no_data_base_data" \
+ "$::valnum_re = \{<base_data> = \{a = 3\}, <No data fields>\}"
+
+gdb_test "with print pretty off -- print v_data_base_no_data" \
+ "$::valnum_re = \{<base_no_data> = \{<No data fields>\}, c = 4\}"
+
+gdb_test "with print pretty off -- print v_no_data_base_no_data" \
+ "$::valnum_re = \{<base_no_data> = \{<No data fields>\}, <No data fields>\}"
+
+gdb_test "with print pretty on -- print v_data_base_data" \
+ [multi_line \
+ "$::valnum_re = \{" \
+ " <base_data> = \{" \
+ " a = 1" \
+ " \}, " \
+ " members of <unnamed type>:" \
+ " b = 2" \
+ "\}"]
+
+gdb_test "with print pretty on -- print v_no_data_base_data" \
+ [multi_line \
+ "$::valnum_re = \{" \
+ " <base_data> = \{" \
+ " a = 3" \
+ " \}, <No data fields>\}"]
+
+gdb_test "with print pretty on -- print v_data_base_no_data" \
+ [multi_line \
+ "$::valnum_re = \{" \
+ " <base_no_data> = \{<No data fields>\}, " \
+ " members of <unnamed type>:" \
+ " c = 4" \
+ "\}"]
+
+gdb_test "with print pretty on -- print v_no_data_base_no_data" \
+ [multi_line \
+ "$::valnum_re = \{" \
+ " <base_no_data> = \{<No data fields>\}, <No data fields>\}"]
base-commit: 0f9faaebc91bc1886a563bde6c178601b4be743b
--
2.55.0
next reply other threads:[~2026-08-17 14:59 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-17 14:59 Simon Marchi [this message]
2026-08-17 14:59 ` [PATCH 2/2] gdb: don't print trailing space after base classes in pretty format Simon Marchi
2026-08-18 5:21 ` [PATCH 1/2] gdb: fix crash when pretty printing anonymous struct with base class Kevin Buettner
2026-08-20 14:12 ` Simon Marchi
2026-08-20 16:21 ` Tom Tromey
2026-08-20 16:26 ` Simon Marchi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260817145907.142300-1-simon.marchi@efficios.com \
--to=simon.marchi@efficios.com \
--cc=gdb-patches@sourceware.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox