Skip to content

Instantly share code, notes, and snippets.

@mithrandi
Created February 8, 2016 12:49
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mithrandi/2b0fa115203001edd1b4 to your computer and use it in GitHub Desktop.
Save mithrandi/2b0fa115203001edd1b4 to your computer and use it in GitHub Desktop.
ASAN failure
==2124==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf4676669 at pc 0x085c7b84 bp 0xffbfa928 sp 0xffbfa920
WRITE of size 4 at 0xf4676669 thread T0
#0 0x85c7b83 in cell_dealloc /tmp/Python-3.5.1/Objects/cellobject.c:49
#1 0x85e971d in frame_dealloc /tmp/Python-3.5.1/Objects/frameobject.c:433
#2 0x83b8341 in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3977
#3 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#4 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#5 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#6 0x839d917 in ext_do_call /tmp/Python-3.5.1/Python/ceval.c:4983
#7 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#8 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#9 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#10 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#11 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#12 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#13 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#14 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#15 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#16 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#17 0x839d917 in ext_do_call /tmp/Python-3.5.1/Python/ceval.c:4983
#18 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#19 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#20 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#21 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#22 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#23 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#24 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#25 0x85c9031 in method_call /tmp/Python-3.5.1/Objects/classobject.c:330
#26 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#27 0x82b18c4 in slot_tp_init /tmp/Python-3.5.1/Objects/typeobject.c:6274
#28 0x82a424c in type_call /tmp/Python-3.5.1/Objects/typeobject.c:923
#29 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#30 0x839e36a in do_call /tmp/Python-3.5.1/Python/ceval.c:4887
#31 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#32 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#33 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#34 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#35 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#36 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#37 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#38 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#39 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#40 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#41 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#42 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#43 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#44 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#45 0x85c9031 in method_call /tmp/Python-3.5.1/Objects/classobject.c:330
#46 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#47 0x82ae62e in slot_tp_call /tmp/Python-3.5.1/Objects/typeobject.c:6059
#48 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#49 0x839e36a in do_call /tmp/Python-3.5.1/Python/ceval.c:4887
#50 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#51 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#52 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#53 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#54 0x839d917 in ext_do_call /tmp/Python-3.5.1/Python/ceval.c:4983
#55 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#56 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#57 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#58 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#59 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#60 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#61 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#62 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#63 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#64 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#65 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#66 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#67 0x85c9031 in method_call /tmp/Python-3.5.1/Objects/classobject.c:330
#68 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#69 0x82ae62e in slot_tp_call /tmp/Python-3.5.1/Objects/typeobject.c:6059
#70 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#71 0x839e36a in do_call /tmp/Python-3.5.1/Python/ceval.c:4887
#72 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#73 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#74 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#75 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#76 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#77 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#78 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#79 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#80 0x839d917 in ext_do_call /tmp/Python-3.5.1/Python/ceval.c:4983
#81 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#82 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#83 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#84 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#85 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#86 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#87 0x83bacf5 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4754
#88 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#89 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#90 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#91 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#92 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#93 0x85c9031 in method_call /tmp/Python-3.5.1/Objects/classobject.c:330
#94 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#95 0x82ae62e in slot_tp_call /tmp/Python-3.5.1/Objects/typeobject.c:6059
#96 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#97 0x839e36a in do_call /tmp/Python-3.5.1/Python/ceval.c:4887
#98 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#99 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#100 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#101 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#102 0x838d593 in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#103 0x83841e3 in builtin_exec_impl /tmp/Python-3.5.1/Python/bltinmodule.c:957
#104 0x86007c1 in PyCFunction_Call /tmp/Python-3.5.1/Objects/methodobject.c:109
#105 0x839e73c in call_function /tmp/Python-3.5.1/Python/ceval.c:4655 (discriminator 4)
#106 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#107 0x83bacd7 in fast_function /tmp/Python-3.5.1/Python/ceval.c:4764
#108 0x839c6ee in call_function /tmp/Python-3.5.1/Python/ceval.c:4681
#109 0x83b842a in _PyEval_EvalCodeWithName /tmp/Python-3.5.1/Python/ceval.c:3966
#110 0x838d60d in PyEval_EvalCodeEx /tmp/Python-3.5.1/Python/ceval.c:3987
#111 0x85f19f6 in function_call /tmp/Python-3.5.1/Objects/funcobject.c:632
#112 0x819c887 in PyObject_Call /tmp/Python-3.5.1/Objects/abstract.c:2165
#113 0x8156894 in RunModule /tmp/Python-3.5.1/Modules/main.c:208
#114 0x8155443 in Py_Main /tmp/Python-3.5.1/Modules/main.c:709
#115 0x814e3b5 in main /tmp/Python-3.5.1/./Programs/python.c:69
#116 0xf752c39d in __libc_start_main ??:?
#117 0x8094a9b in _start ??:?
AddressSanitizer can not describe address in more detail (wild memory access suspected).
Shadow bytes around the buggy address:
0x3e8cec70: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8cec80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8cec90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8ceca0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8cecb0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x3e8cecc0: fa fa fa fa fa fa fa fa fa fa fa fa fa[fa]fa fa
0x3e8cecd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8cece0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8cecf0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8ced00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x3e8ced10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==2124==ABORTING
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment