Re: [Boost-bugs] [Boost C++ Libraries] #10756: AddressSanitizer container overflow in deadline_timer

Subject: Re: [Boost-bugs] [Boost C++ Libraries] #10756: AddressSanitizer container overflow in deadline_timer
From: Boost C++ Libraries (noreply_at_[hidden])
Date: 2015-03-25 22:46:38

#10756: AddressSanitizer container overflow in deadline_timer
-------------------------------+------------------------------
  Reporter:  harjotgill@…      |      Owner:  chris_kohlhoff
      Type:  Bugs              |     Status:  new
 Milestone:  To Be Determined  |  Component:  asio
   Version:  Boost 1.56.0      |   Severity:  Problem
Resolution:                    |   Keywords:  AddressSanitizer
-------------------------------+------------------------------

Comment (by wsmith@…):

 I have what seems to be a similar failure, caused by canceling a timer. On
 OS X 10.10/64-bit, I get a SIGSEGV intermittently.


 {{{
 * thread #2: tid = 0x1e063a, 0x00000001002806ce shared-
 tests`boost::asio::detail::timer_queue<boost::asio::detail::forwarding_posix_time_traits>::remove_timer(this=0x000000010202d1e8,
 timer=0x0000000102100d78) + 1230 at timer_queue.hpp:262, stop reason =
 EXC_BAD_ACCESS (code=EXC_I386_GPFLT)
     frame #0: 0x00000001002806ce shared-
 tests`boost::asio::detail::timer_queue<boost::asio::detail::forwarding_posix_time_traits>::remove_timer(this=0x000000010202d1e8,
 timer=0x0000000102100d78) + 1230 at timer_queue.hpp:262
    259      if (timers_ == &timer)
    260        timers_ = timer.next_;
    261      if (timer.prev_)
 -> 262        timer.prev_->next_ = timer.next_;
    263      if (timer.next_)
    264        timer.next_->prev_= timer.prev_;
    265      timer.next_ = 0;
 (lldb) l -
    252            up_heap(index);
    253          else
    254            down_heap(index);
    255        }
    256      }
    257
    258      // Remove the timer from the linked list of active timers.
 (lldb) l
    259      if (timers_ == &timer)
    260        timers_ = timer.next_;
    261      if (timer.prev_)
    262        timer.prev_->next_ = timer.next_;
    263      if (timer.next_)
    264        timer.next_->prev_= timer.prev_;
    265      timer.next_ = 0;

 }}}

-- 
Ticket URL: <https://svn.boost.org/trac/boost/ticket/10756#comment:1>
Boost C++ Libraries <http://www.boost.org/>
Boost provides free peer-reviewed portable C++ source libraries.