Bug 706024

Summary: use of deleted memory in __gnu_cxx::hashtable::erase
Product: [Fedora] Fedora Reporter: David Tardon <dtardon>
Component: gccAssignee: Jakub Jelinek <jakub>
Status: CLOSED UPSTREAM QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: unspecified    
Version: rawhideCC: bkoz, jakub
Target Milestone: ---Keywords: Patch
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-26 07:37:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
reproducer
none
patch none

Description David Tardon 2011-05-19 08:35:42 UTC
Created attachment 499776 [details]
reproducer

Description of problem:
See the attached reproducer.

Version-Release number of selected component (if applicable):
libstdc++-devel-4.6.0-6.fc15.x86_64

Additional info:
I think this cannot be triggered through normal use of std::hash_map or std::hash_set, because it requires that the bucket contains two nodes with equal key.

Comment 1 David Tardon 2011-05-19 08:36:45 UTC
Created attachment 499777 [details]
patch

Comment 2 Jakub Jelinek 2011-05-19 08:47:11 UTC
Benjamin, can you please take care of this, or alternatively, David, can you file it to gcc.gnu.org/bugzilla instead?

Comment 3 David Tardon 2011-05-19 11:27:55 UTC
okay

Comment 4 David Tardon 2011-07-26 07:37:24 UTC
it has been already fixed upstream