|
--source include/have_innodb.inc
|
|
CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;
|
INSERT INTO t (a) VALUES ('foo'),('bar');
|
ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (PASSWORD(a)), ADD INDEX (f);
|
|
# Cleanup
|
DROP TABLE t;
|
|
10.4 900c4d69
|
==3506475==ERROR: AddressSanitizer: use-after-poison on address 0x6290002b7313 at pc 0x7f3611e4814b bp 0x7f35fcaea160 sp 0x7f35fcae9910
|
READ of size 62 at 0x6290002b7313 thread T27
|
#0 0x7f3611e4814a in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827
|
#1 0x5576534b2740 in wc_ShaUpdate /data/src/10.4/extra/wolfssl/wolfssl/wolfcrypt/src/sha.c:733
|
#2 0x557652510454 in sha_input /data/src/10.4/mysys_ssl/my_sha.inl:69
|
#3 0x55765251055b in my_sha1 /data/src/10.4/mysys_ssl/my_sha.inl:152
|
#4 0x557652170ddf in compute_two_stage_sha1_hash /data/src/10.4/sql/password.c:372
|
#5 0x557652170eb3 in my_make_scrambled_password /data/src/10.4/sql/password.c:398
|
#6 0x557651f2dc3e in Item_func_password::val_str_ascii(String*) /data/src/10.4/sql/item_strfunc.cc:2242
|
#7 0x557651f18783 in Item_func::val_str_from_val_str_ascii(String*, String*) /data/src/10.4/sql/item_strfunc.cc:103
|
#8 0x557651c0d8bf in Item_str_ascii_func::val_str(String*) /data/src/10.4/sql/item_strfunc.h:93
|
#9 0x557651dbd940 in Item::save_str_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6675
|
#10 0x557651b035b1 in Type_handler_string_result::Item_save_in_field(Item*, Field*, bool) const /data/src/10.4/sql/sql_type.cc:3821
|
#11 0x557651dbe0e0 in Item::save_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6723
|
#12 0x5576518de6fe in TABLE::update_virtual_field(Field*, bool) /data/src/10.4/sql/table.cc:8649
|
#13 0x55765273c265 in innobase_get_computed_value(dtuple_t*, dict_v_col_t const*, dict_index_t const*, mem_block_info_t**, mem_block_info_t*, dict_field_t const*, THD*, TABLE*, unsigned char*, dict_table_t const*, upd_t const*, bool) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20933
|
#14 0x557652a3ee99 in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:579
|
#15 0x557652a4c812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
|
#16 0x557652a5c277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
|
#17 0x5576527b310e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
|
#18 0x55765182a265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355
|
#19 0x55765180b843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
|
#20 0x55765181dffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446
|
#21 0x5576519a4a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
|
#22 0x5576515ae1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
|
#23 0x5576515b9a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
|
#24 0x55765158fd41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
|
#25 0x55765158c8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
|
#26 0x55765198be0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
|
#27 0x55765198b726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
|
#28 0x5576525fbe1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
|
#29 0x7f36117c8fd3 in start_thread nptl/pthread_create.c:442
|
#30 0x7f36118495bb in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
|
|
0x6290002b7313 is located 275 bytes inside of 16512-byte region [0x6290002b7200,0x6290002bb280)
|
allocated by thread T27 here:
|
#0 0x7f3611eb89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
|
#1 0x5576528f527f in mem_heap_create_block_func(mem_block_info_t*, unsigned long, char const*, unsigned int, unsigned long) /data/src/10.4/storage/innobase/mem/mem0mem.cc:277
|
#2 0x5576526db780 in mem_heap_create_func /data/src/10.4/storage/innobase/include/mem0mem.inl:375
|
#3 0x55765273a960 in innobase_allocate_row_for_vcol(THD*, dict_index_t*, mem_block_info_t**, TABLE**, VCOL_STORAGE*) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20764
|
#4 0x557652a3ed8f in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:571
|
#5 0x557652a4c812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
|
#6 0x557652a5c277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
|
#7 0x5576527b310e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
|
#8 0x55765182a265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355
|
#9 0x55765180b843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
|
#10 0x55765181dffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446
|
#11 0x5576519a4a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
|
#12 0x5576515ae1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
|
#13 0x5576515b9a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
|
#14 0x55765158fd41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
|
#15 0x55765158c8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
|
#16 0x55765198be0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
|
#17 0x55765198b726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
|
#18 0x5576525fbe1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
|
#19 0x7f36117c8fd3 in start_thread nptl/pthread_create.c:442
|
|
Thread T27 created by T0 here:
|
#0 0x7f3611e49726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
|
#1 0x5576525fc20c in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919
|
#2 0x557651297f89 in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275
|
#3 0x5576512af690 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6287
|
#4 0x5576512afddb in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6357
|
#5 0x5576512b02a9 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6455
|
#6 0x5576512b1155 in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6613
|
#7 0x5576512aedf3 in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5945
|
#8 0x5576512960b8 in main /data/src/10.4/sql/main.cc:25
|
#9 0x7f3611767189 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
|
|
SUMMARY: AddressSanitizer: use-after-poison ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy
|
Shadow bytes around the buggy address:
|
0x0c528004ee10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
0x0c528004ee50: f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
=>0x0c528004ee60: 00 00[03]f7 f7 00 00 00 00 00 00 00 00 00 00 00
|
0x0c528004ee70: 00 00 00 00 00 00 03 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004ee80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004ee90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004eea0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004eeb0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
Shadow byte legend (one shadow byte represents 8 application bytes):
|
Addressable: 00
|
Partially addressable: 01 02 03 04 05 06 07
|
Heap left redzone: fa
|
Freed heap region: fd
|
Stack left redzone: f1
|
Stack mid redzone: f2
|
Stack right redzone: f3
|
Stack after return: f5
|
Stack use after scope: f8
|
Global redzone: f9
|
Global init order: f6
|
Poisoned by user: f7
|
Container overflow: fc
|
Array cookie: ac
|
Intra object redzone: bb
|
ASan internal: fe
|
Left alloca redzone: ca
|
Right alloca redzone: cb
|
==3506475==ABORTING
|
Intermediate versions of the same test case caused SIGSEGV instead of ASAN errors (even on an ASAN build).
Slightly different test case, without PASSWORD in ALTER, causes a confusing error:
--source include/have_innodb.inc
|
|
CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;
|
INSERT INTO t (a) VALUES ('foo'),('bar');
|
ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (a), ADD INDEX (f);
|
|
# Cleanup
|
DROP TABLE t;
|
mysqltest: At line 5: query 'ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (a), ADD INDEX (f)' failed: 1406: Data too long for column 'f' at row 1
|
Another slightly different test case, SHA1 instead of PASSWORD in ALTER, similar as the first one, but a somewhat different stack trace:
--source include/have_innodb.inc
|
|
CREATE TABLE t (a VARCHAR(8), f VARCHAR(128) GENERATED ALWAYS AS (SHA1('qux'))) ENGINE=InnoDB;
|
INSERT INTO t (a) VALUES ('foo'),('bar');
|
ALTER TABLE t MODIFY f VARCHAR(128) GENERATED ALWAYS AS (SHA1(a)), ADD INDEX (f);
|
|
# Cleanup
|
DROP TABLE t;
|
==3506696==ERROR: AddressSanitizer: use-after-poison on address 0x6290002b7313 at pc 0x7face864814b bp 0x7facd33681b0 sp 0x7facd3367960
|
READ of size 62 at 0x6290002b7313 thread T27
|
#0 0x7face864814a in __interceptor_memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827
|
#1 0x562ba14d1740 in wc_ShaUpdate /data/src/10.4/extra/wolfssl/wolfssl/wolfcrypt/src/sha.c:733
|
#2 0x562ba052f454 in sha_input /data/src/10.4/mysys_ssl/my_sha.inl:69
|
#3 0x562ba052f55b in my_sha1 /data/src/10.4/mysys_ssl/my_sha.inl:152
|
#4 0x562b9ff38b22 in Item_func_sha::val_str_ascii(String*) /data/src/10.4/sql/item_strfunc.cc:197
|
#5 0x562b9ff37783 in Item_func::val_str_from_val_str_ascii(String*, String*) /data/src/10.4/sql/item_strfunc.cc:103
|
#6 0x562b9fc2c8bf in Item_str_ascii_func::val_str(String*) /data/src/10.4/sql/item_strfunc.h:93
|
#7 0x562b9fddc940 in Item::save_str_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6675
|
#8 0x562b9fb225b1 in Type_handler_string_result::Item_save_in_field(Item*, Field*, bool) const /data/src/10.4/sql/sql_type.cc:3821
|
#9 0x562b9fddd0e0 in Item::save_in_field(Field*, bool) /data/src/10.4/sql/item.cc:6723
|
#10 0x562b9f8fd6fe in TABLE::update_virtual_field(Field*, bool) /data/src/10.4/sql/table.cc:8649
|
#11 0x562ba075b265 in innobase_get_computed_value(dtuple_t*, dict_v_col_t const*, dict_index_t const*, mem_block_info_t**, mem_block_info_t*, dict_field_t const*, THD*, TABLE*, unsigned char*, dict_table_t const*, upd_t const*, bool) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20933
|
#12 0x562ba0a5de99 in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:579
|
#13 0x562ba0a6b812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
|
#14 0x562ba0a7b277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
|
#15 0x562ba07d210e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
|
#16 0x562b9f849265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355
|
#17 0x562b9f82a843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
|
#18 0x562b9f83cffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446
|
#19 0x562b9f9c3a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
|
#20 0x562b9f5cd1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
|
#21 0x562b9f5d8a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
|
#22 0x562b9f5aed41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
|
#23 0x562b9f5ab8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
|
#24 0x562b9f9aae0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
|
#25 0x562b9f9aa726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
|
#26 0x562ba061ae1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
|
#27 0x7face80a7fd3 in start_thread nptl/pthread_create.c:442
|
#28 0x7face81285bb in clone3 ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
|
|
0x6290002b7313 is located 275 bytes inside of 16512-byte region [0x6290002b7200,0x6290002bb280)
|
allocated by thread T27 here:
|
#0 0x7face86b89cf in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
|
#1 0x562ba091427f in mem_heap_create_block_func(mem_block_info_t*, unsigned long, char const*, unsigned int, unsigned long) /data/src/10.4/storage/innobase/mem/mem0mem.cc:277
|
#2 0x562ba06fa780 in mem_heap_create_func /data/src/10.4/storage/innobase/include/mem0mem.inl:375
|
#3 0x562ba0759960 in innobase_allocate_row_for_vcol(THD*, dict_index_t*, mem_block_info_t**, TABLE**, VCOL_STORAGE*) /data/src/10.4/storage/innobase/handler/ha_innodb.cc:20764
|
#4 0x562ba0a5dd8f in row_merge_buf_add /data/src/10.4/storage/innobase/row/row0merge.cc:571
|
#5 0x562ba0a6b812 in row_merge_read_clustered_index /data/src/10.4/storage/innobase/row/row0merge.cc:2323
|
#6 0x562ba0a7b277 in row_merge_build_indexes(trx_t*, dict_table_t*, dict_table_t*, bool, dict_index_t**, unsigned long const*, unsigned long, TABLE*, dtuple_t const*, unsigned long const*, unsigned long, ib_sequence_t&, bool, ut_stage_alter_t*, dict_add_v_col_t const*, TABLE*, bool) /data/src/10.4/storage/innobase/row/row0merge.cc:4697
|
#7 0x562ba07d210e in ha_innobase::inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/storage/innobase/handler/handler0alter.cc:8735
|
#8 0x562b9f849265 in handler::ha_inplace_alter_table(TABLE*, Alter_inplace_info*) /data/src/10.4/sql/handler.h:4355
|
#9 0x562b9f82a843 in mysql_inplace_alter_table /data/src/10.4/sql/sql_table.cc:7918
|
#10 0x562b9f83cffc in mysql_alter_table(THD*, st_mysql_const_lex_string const*, st_mysql_const_lex_string const*, HA_CREATE_INFO*, TABLE_LIST*, Recreate_info*, Alter_info*, unsigned int, st_order*, bool) /data/src/10.4/sql/sql_table.cc:10446
|
#11 0x562b9f9c3a83 in Sql_cmd_alter_table::execute(THD*) /data/src/10.4/sql/sql_alter.cc:531
|
#12 0x562b9f5cd1fc in mysql_execute_command(THD*) /data/src/10.4/sql/sql_parse.cc:6216
|
#13 0x562b9f5d8a76 in mysql_parse(THD*, char*, unsigned int, Parser_state*, bool, bool) /data/src/10.4/sql/sql_parse.cc:8010
|
#14 0x562b9f5aed41 in dispatch_command(enum_server_command, THD*, char*, unsigned int, bool, bool) /data/src/10.4/sql/sql_parse.cc:1857
|
#15 0x562b9f5ab8b0 in do_command(THD*) /data/src/10.4/sql/sql_parse.cc:1378
|
#16 0x562b9f9aae0f in do_handle_one_connection(CONNECT*) /data/src/10.4/sql/sql_connect.cc:1420
|
#17 0x562b9f9aa726 in handle_one_connection /data/src/10.4/sql/sql_connect.cc:1324
|
#18 0x562ba061ae1f in pfs_spawn_thread /data/src/10.4/storage/perfschema/pfs.cc:1869
|
#19 0x7face80a7fd3 in start_thread nptl/pthread_create.c:442
|
|
Thread T27 created by T0 here:
|
#0 0x7face8649726 in __interceptor_pthread_create ../../../../src/libsanitizer/asan/asan_interceptors.cpp:207
|
#1 0x562ba061b20c in spawn_thread_v1 /data/src/10.4/storage/perfschema/pfs.cc:1919
|
#2 0x562b9f2b6f89 in inline_mysql_thread_create /data/src/10.4/include/mysql/psi/mysql_thread.h:1275
|
#3 0x562b9f2ce690 in create_thread_to_handle_connection(CONNECT*) /data/src/10.4/sql/mysqld.cc:6287
|
#4 0x562b9f2ceddb in create_new_thread(CONNECT*) /data/src/10.4/sql/mysqld.cc:6357
|
#5 0x562b9f2cf2a9 in handle_accepted_socket(st_mysql_socket, st_mysql_socket) /data/src/10.4/sql/mysqld.cc:6455
|
#6 0x562b9f2d0155 in handle_connections_sockets() /data/src/10.4/sql/mysqld.cc:6613
|
#7 0x562b9f2cddf3 in mysqld_main(int, char**) /data/src/10.4/sql/mysqld.cc:5945
|
#8 0x562b9f2b50b8 in main /data/src/10.4/sql/main.cc:25
|
#9 0x7face8046189 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
|
|
SUMMARY: AddressSanitizer: use-after-poison ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc:827 in __interceptor_memcpy
|
Shadow bytes around the buggy address:
|
0x0c528004ee10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
|
0x0c528004ee40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
0x0c528004ee50: f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
=>0x0c528004ee60: 00 00[03]f7 f7 00 00 00 00 00 00 00 00 00 00 00
|
0x0c528004ee70: 00 00 00 00 00 00 03 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004ee80: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004ee90: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004eea0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
0x0c528004eeb0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
|
Shadow byte legend (one shadow byte represents 8 application bytes):
|
Addressable: 00
|
Partially addressable: 01 02 03 04 05 06 07
|
Heap left redzone: fa
|
Freed heap region: fd
|
Stack left redzone: f1
|
Stack mid redzone: f2
|
Stack right redzone: f3
|
Stack after return: f5
|
Stack use after scope: f8
|
Global redzone: f9
|
Global init order: f6
|
Poisoned by user: f7
|
Container overflow: fc
|
Array cookie: ac
|
Intra object redzone: bb
|
ASan internal: fe
|
Left alloca redzone: ca
|
Right alloca redzone: cb
|
==3506696==ABORTING
|
Reproducible on all existing versions.
|