Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20952

unit.mf_iocache failed in buildbot with ASAN stack-buffer-overflow

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Won't Fix
    • 10.2, 10.3
    • N/A
    • Tests
    • None

    Description

      http://buildbot.askmonty.org/buildbot/builders/kvm-asan/builds/2048

      10.3 0fa5ad3acfadfedba6f89d05745bbd1a

      unit.mf_iocache                          w4 [ fail ]
              Test ended at 2019-09-11 12:55:52
       
      CURRENT_TEST: unit.mf_iocache
      1..277
      # temp io_cache with encryption
      ok 1 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 2 - small write, pos_in_file = 0, pos_in_mem = 100
      ok 3 - large write, pos_in_file = 16384, pos_in_mem = 300
      ok 4 - reinit with rewind, pos_in_file = 0, pos_in_mem = 250
      ok 5 - large write, pos_in_file = 16384, pos_in_mem = 450
      ok 6 - flush, pos_in_file = 16834, pos_in_mem = 0
      ok 7 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 8 - file must be unreadable
      ok 9 - small read, pos_in_file = 0, pos_in_mem = 50
      ok 10 - large read, pos_in_file = 16384, pos_in_mem = 250
      # temp io_cache without encryption
      ok 11 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 12 - small write, pos_in_file = 0, pos_in_mem = 100
      ok 13 - large write, pos_in_file = 16384, pos_in_mem = 300
      ok 14 - reinit with rewind, pos_in_file = 250, pos_in_mem = 0
      ok 15 - large write, pos_in_file = 16384, pos_in_mem = 450
      ok 16 - flush, pos_in_file = 16834, pos_in_mem = 0
      ok 17 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 18 - file must be readable
      ok 19 - small read, pos_in_file = 0, pos_in_mem = 50
      ok 20 - large read, pos_in_file = 16384, pos_in_mem = 250
      # MDEV-9044 Binlog corruption in Galera
      ok 21 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 22 - first write, pos_in_file = 0, pos_in_mem = 12
      ok 23 - flush, pos_in_file = 12, pos_in_mem = 0
      ok 24 - reinit WRITE_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 25 - second write, pos_in_file = 0, pos_in_mem = 13
      ok 26 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 27 - fill, pos_in_file = 0, pos_in_mem = 13
      ok 28 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 29 - read 'second write'
      # MDEV-10259- mysqld crash with certain statement length and order with Galera and encrypt-tmp-files=1
      ok 30 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 31 - 200 write, pos_in_file = 0, pos_in_mem = 200
      ok 32 - flush, pos_in_file = 200, pos_in_mem = 0
      ok 33 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 34 - fill, pos_in_file = 0, pos_in_mem = 0
      ok 35 - fill, pos_in_file = 0, pos_in_mem = 200
      ok 36 - fill, pos_in_file = 0, pos_in_mem = 200
      ok 37 - reinit WRITE_CACHE, pos_in_file = 0, pos_in_mem = 200
      ok 38 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 39 - my_b_bytes_in_cache == 200
      ok 40 - fill, pos_in_file = 0, pos_in_mem = 200
      ok 41 - fill, pos_in_file = 0, pos_in_mem = 200
      ok 42 - fill, pos_in_file = 0, pos_in_mem = 200
      ok 43 - reinit WRITE_CACHE, pos_in_file = 0, pos_in_mem = 200
      ok 44 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 45 - my_b_bytes_in_cache == 200
      ok 46 - large read, pos_in_file = 0, pos_in_mem = 200
      # MDEV-14014 Dump thread reads past last 'officially' written byte
      ok 47 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 48 - buffer is written, pos_in_file = 0, pos_in_mem = 200
      ok 49 - flush, pos_in_file = 200, pos_in_mem = 0
      ok 50 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 51 - short read leaves buf_i[100..200-1] == 0
      # MDEV-17133 Dump thread reads from the past
      ok 52 - open_cached_file, pos_in_file = 0, pos_in_mem = 0
      ok 53 - buffer is written, pos_in_file = 262144, pos_in_mem = 0
      ok 54 - cache size as expected
      ok 55 - flush, pos_in_file = 262144, pos_in_mem = 0
      ok 56 - reinit READ_CACHE, pos_in_file = 0, pos_in_mem = 0
      ok 57 - read of 19
      ok 58 - rest of read 20392
      ok 59 - read correct data
      ok 60 - read of 19
      ok 61 - rest of read 12564
      ok 62 - read correct data
      ok 63 - read of 19
      ok 64 - rest of read 14416
      ok 65 - read correct data
      ok 66 - read of 19
      ok 67 - rest of read 1868
      ok 68 - read correct data
      ok 69 - cache is read up to eof
      ok 70 - total matches eof
      ok 71 - read of 19
      ok 72 - rest of read 19717
      ok 73 - read correct data
      ok 74 - read of 19
      ok 75 - rest of read 13932
      ok 76 - read correct data
      ok 77 - read of 19
      ok 78 - rest of read 15651
      ok 79 - read correct data
      ok 80 - read of 19
      ok 81 - rest of read 18446744073709551597
      ok 82 - read correct data
      ok 83 - cache is read up to eof
      ok 84 - total matches eof
      ok 85 - read of 19
      ok 86 - rest of read 13165
      ok 87 - read correct data
      ok 88 - read of 19
      ok 89 - rest of read 17186
      ok 90 - read correct data
      ok 91 - read of 19
      ok 92 - rest of read 13138
      ok 93 - read correct data
      ok 94 - read of 19
      ok 95 - rest of read 13613
      ok 96 - read correct data
      ok 97 - cache is read up to eof
      ok 98 - total matches eof
      ok 99 - read of 19
      ok 100 - rest of read 12451
      ok 101 - read correct data
      ok 102 - read of 19
      ok 103 - rest of read 12924
      ok 104 - read correct data
      ok 105 - read of 19
      ok 106 - rest of read 12531
      ok 107 - read correct data
      ok 108 - read of 19
      ok 109 - rest of read 68311
      

      =================================================================
      ==14694==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffcc7d4cb60 at pc 0x7fa5e0e80bec bp 0x7ffcc7d3cae0 sp 0x7ffcc7d3c288
      WRITE of size 68330 at 0x7ffcc7d4cb60 thread T0
          #0 0x7fa5e0e80beb in __asan_memset (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x8cbeb)
          #1 0x406ab0 in mdev17133() /home/buildbot/buildbot/build/mariadb-10.3.19/unittest/sql/mf_iocache-t.cc:366
          #2 0x407394 in main /home/buildbot/buildbot/build/mariadb-10.3.19/unittest/sql/mf_iocache-t.cc:468
          #3 0x7fa5dfe5282f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
          #4 0x403dc8 in _start (/home/buildbot/buildbot/build/mariadb-10.3.19/unittest/sql/mf_iocache-t+0x403dc8)
       
      Address 0x7ffcc7d4cb60 is located in stack of thread T0 at offset 65568 in frame
          #0 0x40637e in mdev17133() /home/buildbot/buildbot/build/mariadb-10.3.19/unittest/sql/mf_iocache-t.cc:296
       
        This frame has 3 object(s):
          [32, 65568) 'buf_check'
          [65600, 327744) 'buf_i' <== Memory access at offset 65568 partially underflows this variable
          [327776, 589920) 'buf_o'
      HINT: this may be a false positive if your program uses some custom stack unwind mechanism or swapcontext
            (longjmp and C++ exceptions *are* supported)
      SUMMARY: AddressSanitizer: stack-buffer-overflow ??:0 __asan_memset
      Shadow bytes around the buggy address:
        0x100018fa1910: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1930: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1940: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1950: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
      =>0x100018fa1960: 00 00 00 00 00 00 00 00 00 00 00 00[f2]f2 f2 f2
        0x100018fa1970: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa1990: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa19a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
        0x100018fa19b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
      Shadow byte legend (one shadow byte represents 8 application bytes):
        Addressable:           00
        Partially addressable: 01 02 03 04 05 06 07 
        Heap left redzone:       fa
        Heap right redzone:      fb
        Freed heap region:       fd
        Stack left redzone:      f1
        Stack mid redzone:       f2
        Stack right redzone:     f3
        Stack partial redzone:   f4
        Stack after return:      f5
        Stack use after scope:   f8
        Global redzone:          f9
        Global init order:       f6
        Poisoned by user:        f7
        Container overflow:      fc
        Array cookie:            ac
        Intra object redzone:    bb
        ASan internal:           fe
      ==14694==ABORTING
      Bail out! Signal 6 thrown
      # 277 tests planned,  0 failed,  109 was last executed
       
       
      mysqltest failed with unexpected return code 255
      

      Attachments

        Activity

          People

            Unassigned Unassigned
            elenst Elena Stepanova
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.