Skip to content

Instantly share code, notes, and snippets.

@alexey-milovidov
Created September 7, 2017 03:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save alexey-milovidov/e43e6afa425b2b325182312d0f8195be to your computer and use it in GitHub Desktop.
Save alexey-milovidov/e43e6afa425b2b325182312d0f8195be to your computer and use it in GitHub Desktop.
=================================================================
==260044:302867==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61500060db01 at pc 0x00000cf8e0a5 bp 0x7f0359a478f0 sp 0x7f0359a478e8
WRITE of size 8 at 0x61500060db01 thread T3436
#0 0xcf8e0a4 (/usr/bin/clickhouse+0xcf8e0a4)
#1 0xcf8e42b (/usr/bin/clickhouse+0xcf8e42b)
#2 0xcf8f39f (/usr/bin/clickhouse+0xcf8f39f)
#3 0xcf8f78c (/usr/bin/clickhouse+0xcf8f78c)
#4 0xcdef1df (/usr/bin/clickhouse+0xcdef1df)
#5 0xcddf6af (/usr/bin/clickhouse+0xcddf6af)
#6 0xcde32bb (/usr/bin/clickhouse+0xcde32bb)
#7 0xcde3fec (/usr/bin/clickhouse+0xcde3fec)
#8 0xcde429e (/usr/bin/clickhouse+0xcde429e)
#9 0xbc580de (/usr/bin/clickhouse+0xbc580de)
#10 0xc0f5b8b (/usr/bin/clickhouse+0xc0f5b8b)
#11 0xc29685b (/usr/bin/clickhouse+0xc29685b)
#12 0xc29fc61 (/usr/bin/clickhouse+0xc29fc61)
#13 0xc2a0dc6 (/usr/bin/clickhouse+0xc2a0dc6)
#14 0xc245702 (/usr/bin/clickhouse+0xc245702)
#15 0xc2e4e10 (/usr/bin/clickhouse+0xc2e4e10)
#16 0xb8e9e9b (/usr/bin/clickhouse+0xb8e9e9b)
#17 0xb8edd21 (/usr/bin/clickhouse+0xb8edd21)
#18 0xc55e8ac (/usr/bin/clickhouse+0xc55e8ac)
#19 0xc672dc1 (/usr/bin/clickhouse+0xc672dc1)
#20 0xc67f918 (/usr/bin/clickhouse+0xc67f918)
#21 0xc67fbcd (/usr/bin/clickhouse+0xc67fbcd)
#22 0x15cf221 (/usr/bin/clickhouse+0x15cf221)
#23 0x15c082f (/usr/bin/clickhouse+0x15c082f)
#24 0x15da24b (/usr/bin/clickhouse+0x15da24b)
#25 0xd75ee7e (/usr/bin/clickhouse+0xd75ee7e)
#26 0xd75fab2 (/usr/bin/clickhouse+0xd75fab2)
#27 0xdb13c42 (/usr/bin/clickhouse+0xdb13c42)
#28 0xdb0e095 (/usr/bin/clickhouse+0xdb0e095)
#29 0x7f0497458183 (/lib/x86_64-linux-gnu/libpthread.so.0+0x8183)
#30 0x7f0496a7337c (/lib/x86_64-linux-gnu/libc.so.6+0xfa37c)
0x61500060db01 is located 1 bytes to the right of 512-byte region [0x61500060d900,0x61500060db00)
allocated by thread T3436 here:
#0 0x152d9c0 (/usr/bin/clickhouse+0x152d9c0)
#1 0xbba4c1e (/usr/bin/clickhouse+0xbba4c1e)
#2 0xbc5853f (/usr/bin/clickhouse+0xbc5853f)
#3 0xc0f5b8b (/usr/bin/clickhouse+0xc0f5b8b)
#4 0xc29685b (/usr/bin/clickhouse+0xc29685b)
#5 0xc29fc61 (/usr/bin/clickhouse+0xc29fc61)
#6 0xc2a0dc6 (/usr/bin/clickhouse+0xc2a0dc6)
#7 0xc245702 (/usr/bin/clickhouse+0xc245702)
#8 0xc2e4e10 (/usr/bin/clickhouse+0xc2e4e10)
#9 0xb8e9e9b (/usr/bin/clickhouse+0xb8e9e9b)
#10 0xb8edd21 (/usr/bin/clickhouse+0xb8edd21)
#11 0xc55e8ac (/usr/bin/clickhouse+0xc55e8ac)
#12 0xc672dc1 (/usr/bin/clickhouse+0xc672dc1)
#13 0xc67f918 (/usr/bin/clickhouse+0xc67f918)
#14 0xc67fbcd (/usr/bin/clickhouse+0xc67fbcd)
#15 0x15cf221 (/usr/bin/clickhouse+0x15cf221)
#16 0x15c082f (/usr/bin/clickhouse+0x15c082f)
#17 0x15da24b (/usr/bin/clickhouse+0x15da24b)
#18 0xd75ee7e (/usr/bin/clickhouse+0xd75ee7e)
#19 0xd75fab2 (/usr/bin/clickhouse+0xd75fab2)
#20 0xdb13c42 (/usr/bin/clickhouse+0xdb13c42)
#21 0xdb0e095 (/usr/bin/clickhouse+0xdb0e095)
#22 0x7f0497458183 (/lib/x86_64-linux-gnu/libpthread.so.0+0x8183)
Thread T3436 created by T123 here:
#0 0x14895a0 (/usr/bin/clickhouse+0x14895a0)
#1 0xdb0cc31 (/usr/bin/clickhouse+0xdb0cc31)
#2 0xdb10b8e (/usr/bin/clickhouse+0xdb10b8e)
#3 0xdb17076 (/usr/bin/clickhouse+0xdb17076)
#4 0xdb173f6 (/usr/bin/clickhouse+0xdb173f6)
#5 0xd76056e (/usr/bin/clickhouse+0xd76056e)
#6 0xd75e9c8 (/usr/bin/clickhouse+0xd75e9c8)
#7 0xdb0e095 (/usr/bin/clickhouse+0xdb0e095)
#8 0x7f0497458183 (/lib/x86_64-linux-gnu/libpthread.so.0+0x8183)
Thread T123 created by T0 here:
#0 0x14895a0 (/usr/bin/clickhouse+0x14895a0)
#1 0xdb0cc31 (/usr/bin/clickhouse+0xdb0cc31)
#2 0xdb10b8e (/usr/bin/clickhouse+0xdb10b8e)
#3 0x157ecbb (/usr/bin/clickhouse+0x157ecbb)
#4 0xd8b77cc (/usr/bin/clickhouse+0xd8b77cc)
#5 0x159ffab (/usr/bin/clickhouse+0x159ffab)
#6 0x15689ab (/usr/bin/clickhouse+0x15689ab)
#7 0x7f049699af44 (/lib/x86_64-linux-gnu/libc.so.6+0x21f44)
SUMMARY: AddressSanitizer: heap-buffer-overflow (/usr/bin/clickhouse+0xcf8e0a4)
Shadow bytes around the buggy address:
0x0c2a800b9b10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9b20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c2a800b9b30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c2a800b9b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c2a800b9b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x0c2a800b9b60:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9b70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9b80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9b90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9ba0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c2a800b9bb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==260044:302867==ABORTING
user@server:~# addr2line -iCe /usr/bin/clickhouse 0xcf8e0a4 0xcf8e42b 0xcf8f39f 0xcf8f78c 0xcdef1df 0xcddf6af 0xcde32bb 0xcde3fec 0xcde429e 0xbc580de 0xc0f5b8b 0xc29685b 0xc29fc61 0xc2a0dc6 0xc245702 0xc2e4e10 0xb8e9e9b 0xb8edd21 0xc55e8ac 0xc672dc1 0xc67f918 0xc67fbcd 0x15cf221 0x15c082f 0x15da24b 0xd75ee7e 0xd75fab2 0xdb13c42 0xdb0e095
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/common/mem.h:138
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/common/mem.h:283
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/common/mem.h:301
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/common/bitstream.h:262
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/common/bitstream.h:275
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/huf_compress.c:489
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/huf_compress.c:527
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/huf_compress.c:543
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/huf_compress.c:631
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/huf_compress.c:674
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:983
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:1091
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:2826
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:2883
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:2994
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:3310
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:3335
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:3353
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:3358
/home/milovidov/ClickHouse_asan/contrib/libzstd/include/zstd/compress/zstd_compress.c:3367
/home/milovidov/ClickHouse_asan/dbms/src/IO/CompressedWriteBuffer.cpp:81
/home/milovidov/ClickHouse_asan/dbms/src/IO/WriteBuffer.h:44
/home/milovidov/ClickHouse_asan/dbms/src/IO/HashingWriteBuffer.h:64
/home/milovidov/ClickHouse_asan/dbms/src/IO/WriteBuffer.h:44
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:293
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:408
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:439
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergeTreeDataWriter.cpp:201
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/ReplicatedMergeTreeBlockOutputStream.cpp:116
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/PushingToViewsBlockOutputStream.h:51
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/MaterializingBlockOutputStream.h:20
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/AddingDefaultBlockOutputStream.cpp:22
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/ProhibitColumnsBlockOutputStream.cpp:20
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/SquashingBlockOutputStream.cpp:30
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/SquashingBlockOutputStream.cpp:50
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:293
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:165
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:759
/home/milovidov/ClickHouse_asan/contrib/libpoco/Net/src/TCPServerConnection.cpp:45
/home/milovidov/ClickHouse_asan/contrib/libpoco/Net/src/TCPServerDispatcher.cpp:118
/home/milovidov/ClickHouse_asan/contrib/libpoco/Foundation/src/ThreadPool.cpp:200
/home/milovidov/ClickHouse_asan/contrib/libpoco/Foundation/src/Thread_POSIX.cpp:344
user@server:~#
user@server:~#
user@server:~# addr2line -iCe /usr/bin/clickhouse 0x152d9c0 0xbba4c1e 0xbc5853f 0xc0f5b8b 0xc29685b 0xc29fc61 0xc2a0dc6 0xc245702 0xc2e4e10 0xb8e9e9b 0xb8edd21 0xc55e8ac 0xc672dc1 0xc67f918 0xc67fbcd 0x15cf221 0x15c082f 0x15da24b 0xd75ee7e 0xd75fab2 0xdb13c42 0xdb0e095
/home/milovidov/llvm/llvm/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:67
/home/milovidov/ClickHouse_asan/dbms/src/Common/Allocator.cpp:72
/home/milovidov/ClickHouse_asan/dbms/src/Common/PODArray.h:81
/home/milovidov/ClickHouse_asan/dbms/src/Common/PODArray.h:98
/home/milovidov/ClickHouse_asan/dbms/src/Common/PODArray.h:211
/home/milovidov/ClickHouse_asan/dbms/src/Common/PODArray.h:217
/home/milovidov/ClickHouse_asan/dbms/src/IO/CompressedWriteBuffer.cpp:77
/home/milovidov/ClickHouse_asan/dbms/src/IO/WriteBuffer.h:44
/home/milovidov/ClickHouse_asan/dbms/src/IO/HashingWriteBuffer.h:64
/home/milovidov/ClickHouse_asan/dbms/src/IO/WriteBuffer.h:44
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:293
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:408
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergedBlockOutputStream.cpp:439
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/MergeTreeDataWriter.cpp:201
/home/milovidov/ClickHouse_asan/dbms/src/Storages/MergeTree/ReplicatedMergeTreeBlockOutputStream.cpp:116
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/PushingToViewsBlockOutputStream.h:51
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/MaterializingBlockOutputStream.h:20
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/AddingDefaultBlockOutputStream.cpp:22
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/ProhibitColumnsBlockOutputStream.cpp:20
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/SquashingBlockOutputStream.cpp:30
/home/milovidov/ClickHouse_asan/dbms/src/DataStreams/SquashingBlockOutputStream.cpp:50
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:293
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:165
/home/milovidov/ClickHouse_asan/dbms/src/Server/TCPHandler.cpp:759
/home/milovidov/ClickHouse_asan/contrib/libpoco/Net/src/TCPServerConnection.cpp:45
/home/milovidov/ClickHouse_asan/contrib/libpoco/Net/src/TCPServerDispatcher.cpp:118
/home/milovidov/ClickHouse_asan/contrib/libpoco/Foundation/src/ThreadPool.cpp:200
/home/milovidov/ClickHouse_asan/contrib/libpoco/Foundation/src/Thread_POSIX.cpp:344
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment