Bug 706024 - use of deleted memory in __gnu_cxx::hashtable::erase
Summary: use of deleted memory in __gnu_cxx::hashtable::erase
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: gcc
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
low
Target Milestone: ---
Assignee: Jakub Jelinek
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-19 08:35 UTC by David Tardon
Modified: 2011-07-26 07:37 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-26 07:37:24 UTC
Type: ---

Attachments (Terms of Use)
reproducer (919 bytes, text/plain)
2011-05-19 08:35 UTC, David Tardon 		no flags Details
patch (1.22 KB, patch)
2011-05-19 08:36 UTC, David Tardon 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
GNU Compiler Collection 49060 0 None None None Never

Description David Tardon 2011-05-19 08:35:42 UTC 
Created attachment 499776 [details]
reproducer

Description of problem:
See the attached reproducer.

Version-Release number of selected component (if applicable):
libstdc++-devel-4.6.0-6.fc15.x86_64

Additional info:
I think this cannot be triggered through normal use of std::hash_map or std::hash_set, because it requires that the bucket contains two nodes with equal key.
Comment 1 David Tardon 2011-05-19 08:36:45 UTC 
Created attachment 499777 [details]
patch
Comment 2 Jakub Jelinek 2011-05-19 08:47:11 UTC 
Benjamin, can you please take care of this, or alternatively, David, can you file it to gcc.gnu.org/bugzilla instead?
Comment 3 David Tardon 2011-05-19 11:27:55 UTC 
okay
Comment 4 David Tardon 2011-07-26 07:37:24 UTC 
it has been already fixed upstream
Note You need to log in before you can comment on or make changes to this bug.