From: Takao NISHI <redmine@...>
Date: 2010-02-26T13:37:07+09:00
Subject: [ruby-dev:40492] [Bug #2794] Aborted (core dumped) BUG on Ruby/DL

Bug #2794: Aborted (core dumped) BUG on Ruby/DL
http://redmine.ruby-lang.org/issues/show/2794

起票者: Takao NISHI
ステータス: Open, 優先度: Normal
ruby -v: ruby 1.8.6 (2007-09-24 patchlevel 111) [i486-linux], ruby 1.8.7 (2008-08-11 patchlevel 72) [i386-cygwin]

以下のコードでcore dumpします。
----
$ ruby -rdl/import -e 's=DL.strdup("\0"*1024);s[0,1023]="\xff"'
*** glibc detected *** ruby: free(): invalid next size (fast): 0x0808ec18 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7cdea85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7ce24f0]
/usr/lib/libruby1.8.so.1.8(ruby_xfree+0x37)[0xb7e79ac7]
/usr/lib/ruby/1.8/i486-linux/dl.so(dlfree+0x1d)[0xb7c36a7d]
/usr/lib/ruby/1.8/i486-linux/dl.so(dlptr_free+0x2f)[0xb7c398df]
/usr/lib/libruby1.8.so.1.8(rb_gc_call_finalizer_at_exit+0xa7)[0xb7e79d97]
/usr/lib/libruby1.8.so.1.8[0xb7e5f997]
/usr/lib/libruby1.8.so.1.8(ruby_cleanup+0x100)[0xb7e67b90]
/usr/lib/libruby1.8.so.1.8(ruby_stop+0x1d)[0xb7e67cdd]
/usr/lib/libruby1.8.so.1.8[0xb7e72d51]
ruby[0x80486bd]
/lib/tls/i686/cmov/libc.so.6(__libc_start_main+0xe0)[0xb7c89450]
ruby[0x8048601]
======= Memory map: ========
08048000-08049000 r-xp 00000000 08:04 20186180   /usr/bin/ruby1.8
08049000-0804a000 rw-p 00000000 08:04 20186180   /usr/bin/ruby1.8
0804a000-080ad000 rw-p 0804a000 00:00 0          [heap]
b7b00000-b7b21000 rw-p b7b00000 00:00 0
b7b21000-b7c00000 ---p b7b21000 00:00 0
b7c2c000-b7c3f000 r-xp 00000000 08:04 20283415   /usr/lib/ruby/1.8/i486-linux/dl.so
b7c3f000-b7c40000 rw-p 00012000 08:04 20283415   /usr/lib/ruby/1.8/i486-linux/dl.so
b7c40000-b7c73000 rw-p b7c40000 00:00 0
b7c73000-b7dbc000 r-xp 00000000 08:04 2195508    /lib/tls/i686/cmov/libc-2.7.so
b7dbc000-b7dbd000 r--p 00149000 08:04 2195508    /lib/tls/i686/cmov/libc-2.7.so
b7dbd000-b7dbf000 rw-p 0014a000 08:04 2195508    /lib/tls/i686/cmov/libc-2.7.so
b7dbf000-b7dc2000 rw-p b7dbf000 00:00 0
b7dc2000-b7de5000 r-xp 00000000 08:04 2195520    /lib/tls/i686/cmov/libm-2.7.so
b7de5000-b7de7000 rw-p 00023000 08:04 2195520    /lib/tls/i686/cmov/libm-2.7.so
b7de7000-b7df0000 r-xp 00000000 08:04 2195517    /lib/tls/i686/cmov/libcrypt-2.7.so
b7df0000-b7df2000 rw-p 00008000 08:04 2195517    /lib/tls/i686/cmov/libcrypt-2.7.so
b7df2000-b7e19000 rw-p b7df2000 00:00 0
b7e19000-b7e1b000 r-xp 00000000 08:04 2195518    /lib/tls/i686/cmov/libdl-2.7.so
b7e1b000-b7e1d000 rw-p 00001000 08:04 2195518    /lib/tls/i686/cmov/libdl-2.7.so
b7e1d000-b7e1e000 rw-p b7e1d000 00:00 0
b7e1e000-b7e32000 r-xp 00000000 08:04 2195546    /lib/tls/i686/cmov/libpthread-2.7.so
b7e32000-b7e34000 rw-p 00013000 08:04 2195546    /lib/tls/i686/cmov/libpthread-2.7.so
b7e34000-b7e36000 rw-p b7e34000 00:00 0
b7e36000-b7ef4000 r-xp 00000000 08:04 20185223   /usr/lib/libruby1.8.so.1.8.6
b7ef4000-b7ef6000 rw-p 000be000 08:04 20185223   /usr/lib/libruby1.8.so.1.8.6
b7ef6000-b7f06000 rw-p b7ef6000 00:00 0
b7f0d000-b7f17000 r-xp 00000000 08:04 2195478    /lib/libgcc_s.so.1
b7f17000-b7f18000 rw-p 0000a000 08:04 2195478    /lib/libgcc_s.so.1
b7f18000-b7f1b000 rw-p b7f18000 00:00 0
b7f1b000-b7f1c000 r-xp b7f1b000 00:00 0          [vdso]
b7f1c000-b7f36000 r-xp 00000000 08:04 2195669    /lib/ld-2.7.so
b7f36000-b7f38000 rw-p 00019000 08:04 2195669    /lib/ld-2.7.so
bfd7c000-bfd91000 rw-p bffeb000 00:00 0          [stack]
Aborted (core dumped)
----

以下のコードでは問題ないのでDL.strdupの問題と思われます

ruby -rdl/import -e 's=DL.malloc(1024);s[0,1023]="\xff"'


----------------------------------------
http://redmine.ruby-lang.org