Bug 591879

Summary: crash on VLA bound referencing optimized-out variable
Product: [Fedora] Fedora Reporter: Adam Goode <adam>
Component: gdbAssignee: Jan Kratochvil <jan.kratochvil>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 13CC: jan.kratochvil, pmuldoon, swagiaal
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard: abrt_hash:1d39d08e754518f5d5477c2b81b982daad3861e5
Fixed In Version: gdb-7.1-20.fc13 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 591993 (view as bug list) Environment:
Last Closed: 2010-05-15 20:16:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 591993    
Attachments:
Description Flags
File: backtrace none

Description Adam Goode 2010-05-13 12:17:55 UTC
abrt 1.1.0 detected a crash.

architecture: x86_64
Attached file: backtrace
cmdline: gdb empathy
component: gdb
crash_function: attr_form_is_section_offset
executable: /usr/bin/gdb
global_uuid: 1d39d08e754518f5d5477c2b81b982daad3861e5
kernel: 2.6.33.3-85.fc13.x86_64
package: gdb-7.1-18.fc13
rating: 4
reason: Process /usr/bin/gdb was killed by signal 11 (SIGSEGV)
release: Fedora release 13 (Goddard)

comment
-----
Was attempting to debug empathy:

#14 0x000000371704aeb9 in IA__g_option_context_parse (context=0x706f30, 
    argc=<value optimized out>, argv=<value optimized out>, 
    error=<value optimized out>) at goption.c:1947
1947		  if (!(* group->post_parse_func) (context, group,
(gdb) list
1942	    {
1943	      GOptionGroup *group = list->data;
1944	      
1945	      if (group->post_parse_func)
1946		{
1947		  if (!(* group->post_parse_func) (context, group,
1948						   group->user_data, error))
1949		    goto fail;
1950		}
1951	      
(gdb) print group
$10 = <value optimized out>
(gdb) print *group
Cannot access memory at address 0x0
(gdb) print context
$11 = (GOptionContext *) 0x706f30
(gdb) print *context
$12 = {groups = 0x6fd8a0 = {0x706f90, 0x709a40, 0x70bdb0}, parameter_string = 
    0x706e80 "- Empathy IM Client", summary = 0x0, description = 0x0, 
  translate_func = 0, translate_notify = 0, translate_data = 0x0, 
  help_enabled = 1, ignore_unknown = 0, main_group = 0x70be20, changes = 0x0, 
  pending_nulls = 0x0}
(gdb) print list
$13 = <value optimized out>
(gdb) print *context->groups
$14 = {data=0x706f90, next=0x6fd8c0, prev=0x0}
(gdb) print context->groups
$15 = 0x6fd8a0 = {0x706f90, 0x709a40, 0x70bdb0}
(gdb) print *context->groups
$16 = {data=0x706f90, next=0x6fd8c0, prev=0x0}
(gdb) print *context->groups->data
Segmentation fault (core dumped)

Comment 1 Adam Goode 2010-05-13 12:17:58 UTC
Created attachment 413736 [details]
File: backtrace

Comment 2 Jan Kratochvil 2010-05-13 16:10:23 UTC
Great bugreport, thanks.
Checked-in now in archer-jankratochvil-vla as:
a683bac73af74a757591672d89d720169c0b5ec9

Comment 3 Fedora Update System 2010-05-13 17:37:35 UTC
gdb-7.1-20.fc13 has been submitted as an update for Fedora 13.
http://admin.fedoraproject.org/updates/gdb-7.1-20.fc13

Comment 4 Fedora Update System 2010-05-15 20:16:21 UTC
gdb-7.1-20.fc13 has been pushed to the Fedora 13 stable repository.  If problems still persist, please make note of it in this bug report.