Front page | perl.perl5.porters |
Postings from April 2015
# New Ticket Created by Brian Carpenter
# Please include the string: [perl #124368]
# in the subject line of all future correspondence about this issue.
# <URL: https://rt.perl.org/Ticket/Display.html?id=124368 >
Built v5.21.12 (v5.21.11-10-ga8f582b) using the following command line:
./Configure -des -Dusedevel -DDEBUGGING -Dcc=afl-gcc -Doptimize=-O2\ -g && AFL_HARDEN=1 make -j6 test-prep
Bug found with AFL (http://lcamtuf.coredump.cx/afl)
GDB output:
perl: sv.c:2964: Perl_sv_2pv_flags: Assertion `((svtype)((sv)->sv_flags & 0xff)) != SVt_PVAV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVHV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVFM' failed.
Program received signal SIGABRT, Aborted.
[----------------------------------registers-----------------------------------]
RAX: 0x0
RBX: 0x7fffffffe624 --> 0x736574006c726570 ('perl')
RCX: 0xffffffffffffffff
RDX: 0x6
RSI: 0x126d
RDI: 0x126d
RBP: 0x7ffff6ea9c67 --> 0x257325732500203a (': ')
RSP: 0x7fffffffde68 --> 0x7ffff6d933e0 (<*__GI_abort+384>: mov rdx,QWORD PTR fs:0x10)
RIP: 0x7ffff6d90165 (<*__GI_raise+53>: cmp rax,0xfffffffffffff000)
R8 : 0x7ffff7fdc700 (0x00007ffff7fdc700)
R9 : 0x5653203d21202929 (')) != SV')
R10: 0x8
R11: 0x202
R12: 0xf3b378 ("((svtype)((sv)->sv_flags & 0xff)) != SVt_PVAV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVHV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVFM")
R13: 0xf4fab0 ("Perl_sv_2pv_flags")
R14: 0x7ffff6ea9c67 --> 0x257325732500203a (': ')
R15: 0xb94
EFLAGS: 0x202 (carry parity adjust zero sign trap INTERRUPT direction overflow)
[-------------------------------------code-------------------------------------]
0x7ffff6d9015b <*__GI_raise+43>: movsxd rdi,eax
0x7ffff6d9015e <*__GI_raise+46>: mov eax,0xea
0x7ffff6d90163 <*__GI_raise+51>: syscall
=> 0x7ffff6d90165 <*__GI_raise+53>: cmp rax,0xfffffffffffff000
0x7ffff6d9016b <*__GI_raise+59>: ja 0x7ffff6d90182 <*__GI_raise+82>
0x7ffff6d9016d <*__GI_raise+61>: repz ret
0x7ffff6d9016f <*__GI_raise+63>: nop
0x7ffff6d90170 <*__GI_raise+64>: test eax,eax
[------------------------------------stack-------------------------------------]
0000| 0x7fffffffde68 --> 0x7ffff6d933e0 (<*__GI_abort+384>: mov rdx,QWORD PTR fs:0x10)
0008| 0x7fffffffde70 --> 0xf3b378 ("((svtype)((sv)->sv_flags & 0xff)) != SVt_PVAV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVHV && ((svtype)((sv)->sv_flags & 0xff)) != SVt_PVFM")
0016| 0x7fffffffde78 --> 0x7ffff6eabc21 --> 0x706c6568007325 ('%s')
0024| 0x7fffffffde80 --> 0x7fffffffdea0 --> 0x3000000018
0032| 0x7fffffffde88 --> 0xb94
0040| 0x7fffffffde90 --> 0x7fffffffdf90 --> 0x7fffffffe624 --> 0x736574006c726570 ('perl')
0048| 0x7fffffffde98 --> 0x7ffff6dc41b6 (<__fxprintf+310>: lea rsp,[rbp-0x20])
0056| 0x7fffffffdea0 --> 0x3000000018
[------------------------------------------------------------------------------]
Legend: code, data, rodata, value
Stopped reason: SIGABRT
0x00007ffff6d90165 in *__GI_raise (sig=<optimized out>)
at ../nptl/sysdeps/unix/sysv/linux/raise.c:64
64 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
System Info: Debian 7, Kernel 3.2.65-1+deb7u2 x86_64, GCC 4.9.2, libc 2.13-38+deb7u8
Thread Previous