Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save themarwhal/da82e7604b4c2c07f5397ed766a9b69a to your computer and use it in GitHub Desktop.
Save themarwhal/da82e7604b4c2c07f5397ed766a9b69a to your computer and use it in GitHub Desktop.
all the tests with asan!
[ RUN ] test_ngap_handle_new_association.empty_initial_state
[ OK ] test_ngap_handle_new_association.empty_initial_state (5 ms)
[----------] 1 test from test_ngap_handle_new_association (5 ms total)
[----------] 21 tests from NgapFlowTest
[ RUN ] NgapFlowTest.test_ngap_setup_request
[ OK ] NgapFlowTest.test_ngap_setup_request (6 ms)
[ RUN ] NgapFlowTest.initial_ue_message_sunny_day
[ OK ] NgapFlowTest.initial_ue_message_sunny_day (2 ms)
[ RUN ] NgapFlowTest.uplink_nas_transport_sunny_day
[ OK ] NgapFlowTest.uplink_nas_transport_sunny_day (1 ms)
[ RUN ] NgapFlowTest.downlink_nas_transport_auth_req_sunny_day
[ OK ] NgapFlowTest.downlink_nas_transport_auth_req_sunny_day (1 ms)
[ RUN ] NgapFlowTest.initial_context_setup_request_sunny_day
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200645.26553![ OK ] NgapFlowTest.initial_context_setup_request_sunny_day (1 ms)
[ RUN ] NgapFlowTest.initial_context_setup_response_sunny_day
[ OK ] NgapFlowTest.initial_context_setup_response_sunny_day (1 ms)
[ RUN ] NgapFlowTest.ue_context_release_request_sunny_day
[ OK ] NgapFlowTest.ue_context_release_request_sunny_day (0 ms)
[ RUN ] NgapFlowTest.ue_context_release_complete_sunny_day
[ OK ] NgapFlowTest.ue_context_release_complete_sunny_day (1 ms)
[ RUN ] NgapFlowTest.ue_context_release_command_sunny_day
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200645.26553![ OK ] NgapFlowTest.ue_context_release_command_sunny_day (0 ms)
[ RUN ] NgapFlowTest.pdu_sess_resource_setup_req_sunny_day
PDUSessionResourceSetupRequestTransfer ::= {
protocolIEs: ProtocolIE-Container ::= {
PDUSessionResourceSetupRequestTransferIEs ::= {
id: 130
criticality: 0 (reject)
value: PDUSessionAggregateMaximumBitRate ::= {
pDUSessionAggregateMaximumBitRateDL: 1024
pDUSessionAggregateMaximumBitRateUL: 1024
}
}
PDUSessionResourceSetupRequestTransferIEs ::= {
id: 139
criticality: 0 (reject)
value: GTPTunnel ::= {
transportLayerAddress: C0 A8 3C 8E
gTP-TEID: 80 00 00 01
}
}
PDUSessionResourceSetupRequestTransferIEs ::= {
id: 134
criticality: 0 (reject)
value: 0 (ipv4)
}
PDUSessionResourceSetupRequestTransferIEs ::= {
id: 136
criticality: 0 (reject)
value: QosFlowSetupRequestList ::= {
QosFlowSetupRequestItem ::= {
qosFlowIdentifier: 5
qosFlowLevelQosParameters: QosFlowLevelQosParameters ::= {
qosCharacteristics: NonDynamic5QIDescriptor ::= {
fiveQI: 9
}
allocationAndRetentionPriority: AllocationAndRetentionPriority ::= {
priorityLevelARP: 1
pre-emptionCapability: 0 (shall-not-trigger-pre-emption)
pre-emptionVulnerability: 0 (not-pre-emptable)
}
}
}
}
}
}
}
[ OK ] NgapFlowTest.pdu_sess_resource_setup_req_sunny_day (1 ms)
[ RUN ] NgapFlowTest.pdu_session_resource_setup_resp_sunny_day
[ OK ] NgapFlowTest.pdu_session_resource_setup_resp_sunny_day (1 ms)
[ RUN ] NgapFlowTest.pdu_sess_resource_rel_cmd_sunny_day
[ OK ] NgapFlowTest.pdu_sess_resource_rel_cmd_sunny_day (0 ms)
[ RUN ] NgapFlowTest.initial_context_setup_failure_rainy_day
[ OK ] NgapFlowTest.initial_context_setup_failure_rainy_day (1 ms)
[ RUN ] NgapFlowTest.uplink_nas_transport_rainy_day
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200645.26553![ OK ] NgapFlowTest.uplink_nas_transport_rainy_day (0 ms)
[ RUN ] NgapFlowTest.downlink_nas_transport_auth_rainy_day
[ OK ] NgapFlowTest.downlink_nas_transport_auth_rainy_day (0 ms)
[ RUN ] NgapFlowTest.initial_context_setup_request_rainy_day
[ OK ] NgapFlowTest.initial_context_setup_request_rainy_day (1 ms)
[ RUN ] NgapFlowTest.initial_context_setup_response_rainy_day
[ OK ] NgapFlowTest.initial_context_setup_response_rainy_day (0 ms)
[ RUN ] NgapFlowTest.ue_context_release_request_rainy_day
[ OK ] NgapFlowTest.ue_context_release_request_rainy_day (0 ms)
[ RUN ] NgapFlowTest.ue_context_release_command_rainy_day
[ OK ] NgapFlowTest.ue_context_release_command_rainy_day (1 ms)
[ RUN ] NgapFlowTest.pdu_session_resource_setup_resp_rainy_day
[ OK ] NgapFlowTest.pdu_session_resource_setup_resp_rainy_day (0 ms)
[ RUN ] NgapFlowTest.test_ue_notifications_from_amf
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200645.26553![ OK ] NgapFlowTest.test_ue_notifications_from_amf (1 ms)
[----------] 21 tests from NgapFlowTest (19 ms total)
[----------] 3 tests from NgapStateConverterTest
[ RUN ] NgapStateConverterTest.NgapStateConversionSuccess
=================================================================
==26553==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffe881e3b96 at pc 0x7fefd1f44a6d bp 0x7ffe881e3a00 sp 0x7ffe881e31a8
READ of size 7 at 0x7ffe881e3b96 thread T0
#0 0x7fefd1f44a6c (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
#1 0x7fefd15b3f68 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(char const*) (/lib/x86_64-linux-gnu/libstdc++.so.6+0x143f68)
#2 0x55f16f5706d4 in magma::lte::oai::Ngap_SupportedTaiItems::add_bplmns(char const*) tasks/ngap/lte/protos/oai/ngap_state.pb.h:1288
#3 0x55f16f56df21 in magma5g::NgapStateConverter::supported_tai_item_to_proto(m5g_supported_tai_items_s const*, magma::lte::oai::Ngap_SupportedTaiItems*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/ngap/ngap_state_converter.cpp:238
#4 0x55f16f56cb07 in magma5g::NgapStateConverter::supported_ta_list_to_proto(m5g_supported_ta_list_s const*, magma::lte::oai::Ngap_SupportedTaList*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/ngap/ngap_state_converter.cpp:195
#5 0x55f16f56788b in magma5g::NgapStateConverter::gnb_to_proto(gnb_description_s*, magma::lte::oai::GnbDescription*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/ngap/ngap_state_converter.cpp:103
#6 0x55f16f57470f in std::_Function_handler<void (gnb_description_s*, magma::lte::oai::GnbDescription*), void (*)(gnb_description_s*, magma::lte::oai::GnbDescription*)>::_M_invoke(std::_Any_data const&, gnb_description_s*&&, magma::lte::oai::GnbDescription*&&) /usr/include/c++/9/bits/std_function.h:300
#7 0x55f16f574efd in std::function<void (gnb_description_s*, magma::lte::oai::GnbDescription*)>::operator()(gnb_description_s*, magma::lte::oai::GnbDescription*) const /usr/include/c++/9/bits/std_function.h:688
#8 0x55f16f5722af in void magma::lte::StateConverter::hashtable_ts_to_proto<gnb_description_s, magma::lte::oai::GnbDescription>(hash_table_ts_s*, google::protobuf::Map<unsigned int, magma::lte::oai::GnbDescription>*, std::function<void (gnb_description_s*, magma::lte::oai::GnbDescription*)>, log_proto_t) /home/vagrant/magma/lte/gateway/c/core/oai/include/state_converter.h:97
#9 0x55f16f563fb9 in magma5g::NgapStateConverter::state_to_proto(ngap_state_s*, magma::lte::oai::NgapState*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/ngap/ngap_state_converter.cpp:41
#10 0x55f16f2a9e60 in magma5g::NgapStateConverterTest_NgapStateConversionSuccess_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/ngap/test_ngap_state_converter.cpp:139
#11 0x55f16f5c8bd0 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2433
#12 0x55f16f5c8bd0 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2469
#13 0x55f16f5bca25 in testing::Test::Run() googletest/src/gtest.cc:2508
#14 0x55f16f5bca25 in testing::Test::Run() googletest/src/gtest.cc:2498
#15 0x55f16f5bcb84 in testing::TestInfo::Run() googletest/src/gtest.cc:2684
#16 0x55f16f5bcb84 in testing::TestInfo::Run() googletest/src/gtest.cc:2657
#17 0x55f16f5bcc6c in testing::TestSuite::Run() googletest/src/gtest.cc:2816
#18 0x55f16f5bcc6c in testing::TestSuite::Run() googletest/src/gtest.cc:2795
#19 0x55f16f5bd18b in testing::internal::UnitTestImpl::RunAllTests() googletest/src/gtest.cc:5338
#20 0x55f16f5c9140 in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2433
#21 0x55f16f5c9140 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2469
#22 0x55f16f5bd3bb in testing::UnitTest::Run() googletest/src/gtest.cc:4925
#23 0x55f16f1d7286 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#24 0x55f16f1d6f5a in main /home/vagrant/magma/lte/gateway/c/core/oai/test/ngap/ngap_test.cpp:23
#25 0x7fefd091b0b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#26 0x55f16f1d6d9d in _start (/home/vagrant/build/c/core/oai/test/ngap/ngap_test+0x18e3d9d)
Address 0x7ffe881e3b96 is located in stack of thread T0 at offset 38 in frame
#0 0x55f16f56d077 in magma5g::NgapStateConverter::supported_tai_item_to_proto(m5g_supported_tai_items_s const*, magma::lte::oai::Ngap_SupportedTaiItems*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/ngap/ngap_state_converter.cpp:214
This frame has 1 object(s):
[32, 38) 'plmn_array' (line 218) <== Memory access at offset 38 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
Shadow bytes around the buggy address:
0x100051034720: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100051034730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100051034740: 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 f1 f1
0x100051034750: 01 f2 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00
0x100051034760: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
=>0x100051034770: f1 f1[06]f3 f3 f3 00 00 00 00 00 00 00 00 00 00
0x100051034780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100051034790: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
0x1000510347a0: f1 f1 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 00 00
0x1000510347b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
0x1000510347c0: f1 f1 00 00 00 f2 f2 f2 00 00 00 00 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26553==ABORTING
Start 7: test_itti
7/25 Test #7: test_itti .................................. Passed 4.28 sec
Start 8: test_amf_app
8/25 Test #8: test_amf_app ...............................Child aborted***Exception: 0.61 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200650.26585![==========] Running 70 tests from 22 test suites.
[----------] Global test environment set-up.
[----------] 3 tests from AmfNas5GTest
[ RUN ] AmfNas5GTest.test_amf_ue_register_req_msg
[ OK ] AmfNas5GTest.test_amf_ue_register_req_msg (0 ms)
[ RUN ] AmfNas5GTest.test_amf_ue_suci_ext_register_req_msg
[ OK ] AmfNas5GTest.test_amf_ue_suci_ext_register_req_msg (1 ms)
[ RUN ] AmfNas5GTest.test_amf_ue_guti_register_req_msg
[ OK ] AmfNas5GTest.test_amf_ue_guti_register_req_msg (0 ms)
[----------] 3 tests from AmfNas5GTest (1 ms total)
[----------] 12 tests from test_amf_nas5g_pkt_process
[ RUN ] test_amf_nas5g_pkt_process.test_amf_auth_sync_fail_res_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_auth_sync_fail_res_msg (0 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type1_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type1_msg (0 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type2_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type2_msg (0 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type3_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_est_req_type3_msg (0 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_release_complete_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_pdu_sess_release_complete_msg (1 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_deregistration_request_msg
[ OK ] test_amf_nas5g_pkt_process.test_amf_deregistration_request_msg (0 ms)
[ RUN ] test_amf_nas5g_pkt_process.test_amf_service_request_messagetype_data
=================================================================
==26585==ERROR: AddressSanitizer: global-buffer-overflow on address 0x55dc60b87985 at pc 0x55dc5e2e880d bp 0x7ffed1830f30 sp 0x7ffed1830f20
READ of size 1 at 0x55dc60b87985 thread T0
#0 0x55dc5e2e880c in magma5g::ServiceRequestMsg::DecodeServiceRequestMsg(magma5g::ServiceRequestMsg*, unsigned char*, unsigned int) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas5g/src/M5GServiceRequest.cpp:83
#1 0x55dc5e2e8ca5 in magma5g::ServiceRequestMsg::DecodeServiceRequestMsg(magma5g::ServiceRequestMsg*, unsigned char*, unsigned int) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas5g/src/M5GServiceRequest.cpp:105
#2 0x55dc5d1c996e in magma5g::decode_service_request_msg(magma5g::ServiceRequestMsg*, unsigned char const*, unsigned int) /home/vagrant/magma/lte/gateway/c/core/oai/test/amf/util_nas5g_service_request_pkt.cpp:26
#3 0x55dc5d1e0f64 in magma5g::test_amf_nas5g_pkt_process_test_amf_service_request_messagetype_data_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/amf/test_amf_encode_decode.cpp:473
#4 0x55dc5e38d403 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c29403)
#5 0x55dc5e3860fe in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c220fe)
#6 0x55dc5e361885 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4bfd885)
#7 0x55dc5e36227e in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4bfe27e)
#8 0x55dc5e3629c3 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4bfe9c3)
#9 0x55dc5e36eaa9 in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c0aaa9)
#10 0x55dc5e38e91f in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c2a91f)
#11 0x55dc5e38733c in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c2333c)
#12 0x55dc5e36d2c5 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x4c092c5)
#13 0x55dc5d1c4fd6 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#14 0x55dc5d1c4caa in main /home/vagrant/magma/lte/gateway/c/core/oai/test/amf/amf_app_test.cpp:23
#15 0x7fb0ca89d0b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#16 0x55dc5d1c4aed in _start (/home/vagrant/build/c/core/oai/test/amf/amf_app_test+0x3a60aed)
0x55dc60b87985 is located 0 bytes to the right of global variable 'service_request' defined in '/home/vagrant/magma/lte/gateway/c/core/oai/test/amf/test_amf_encode_decode.cpp:106:9' (0x55dc60b87960) of size 37
0x55dc60b87985 is located 59 bytes to the left of global variable 'service_req_signaling' defined in '/home/vagrant/magma/lte/gateway/c/core/oai/test/amf/test_amf_encode_decode.cpp:113:9' (0x55dc60b879c0) of size 13
SUMMARY: AddressSanitizer: global-buffer-overflow /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas5g/src/M5GServiceRequest.cpp:83 in magma5g::ServiceRequestMsg::DecodeServiceRequestMsg(magma5g::ServiceRequestMsg*, unsigned char*, unsigned int)
Shadow bytes around the buggy address:
0x0abc0c168ee0: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 00 00
0x0abc0c168ef0: 00 00 00 00 00 00 00 00 00 00 00 00 03 f9 f9 f9
0x0abc0c168f00: f9 f9 f9 f9 00 00 00 00 00 07 f9 f9 f9 f9 f9 f9
0x0abc0c168f10: 00 00 00 00 02 f9 f9 f9 f9 f9 f9 f9 00 04 f9 f9
0x0abc0c168f20: f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 00 00 00 00
=>0x0abc0c168f30:[05]f9 f9 f9 f9 f9 f9 f9 00 05 f9 f9 f9 f9 f9 f9
0x0abc0c168f40: 00 00 01 f9 f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9
0x0abc0c168f50: 00 00 00 00 00 00 00 00 01 f9 f9 f9 f9 f9 f9 f9
0x0abc0c168f60: 00 00 00 00 01 f9 f9 f9 f9 f9 f9 f9 06 f9 f9 f9
0x0abc0c168f70: f9 f9 f9 f9 00 01 f9 f9 f9 f9 f9 f9 00 00 00 02
0x0abc0c168f80: f9 f9 f9 f9 00 00 03 f9 f9 f9 f9 f9 00 00 02 f9
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26585==ABORTING
Start 9: test_smf_service_client
9/25 Test #9: test_smf_service_client ....................Child aborted***Exception: 0.75 sec
Running main() from /build/googletest-j5yxiC/googletest-1.10.0/googletest/src/gtest_main.cc
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from test_create_sm_pdu_session_v4
[ RUN ] test_create_sm_pdu_session_v4.create_sm_pdu_session_v4
=================================================================
==26587==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffdca35a411 at pc 0x7f03976fca6d bp 0x7ffdca35a1f0 sp 0x7ffdca359998
READ of size 5 at 0x7ffdca35a411 thread T0
#0 0x7f03976fca6c (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
#1 0x7f0396d7b9cb in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string(char const*, std::allocator<char> const&) (/lib/x86_64-linux-gnu/libstdc++.so.6+0x1459cb)
#2 0x55806ff69818 in magma::lte::M5GSMSessionContext::set_procedure_trans_identity(char const*) lib/n11/lte/protos/session_manager.pb.h:22987
#3 0x55806ff59cad in magma5g::create_sm_pdu_session(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, unsigned char*, unsigned int, unsigned int, unsigned int, unsigned char, unsigned char*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, ambr_t const&, unsigned int, eps_subscribed_qos_profile_s const&) /home/vagrant/magma/lte/gateway/c/core/oai/lib/n11/SmfServiceClient.cpp:104
#4 0x55806ff45a17 in magma::lte::test_create_sm_pdu_session_v4_create_sm_pdu_session_v4_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/n11/test_smf_service_client.cpp:61
#5 0x558070b90bc0 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2433
#6 0x558070b90bc0 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2469
#7 0x558070b84045 in testing::Test::Run() googletest/src/gtest.cc:2508
#8 0x558070b84045 in testing::Test::Run() googletest/src/gtest.cc:2498
#9 0x558070b841a4 in testing::TestInfo::Run() googletest/src/gtest.cc:2684
#10 0x558070b841a4 in testing::TestInfo::Run() googletest/src/gtest.cc:2657
#11 0x558070b8428c in testing::TestSuite::Run() googletest/src/gtest.cc:2816
#12 0x558070b8428c in testing::TestSuite::Run() googletest/src/gtest.cc:2795
#13 0x558070b847ab in testing::internal::UnitTestImpl::RunAllTests() googletest/src/gtest.cc:5338
#14 0x558070b91130 in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2433
#15 0x558070b91130 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2469
#16 0x558070b849db in testing::UnitTest::Run() googletest/src/gtest.cc:4925
#17 0x55806ff44703 in main (/home/vagrant/build/c/core/oai/test/n11/smf_service_client+0x1d27703)
#18 0x7f03960e30b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#19 0x55806ff4477d in _start (/home/vagrant/build/c/core/oai/test/n11/smf_service_client+0x1d2777d)
Address 0x7ffdca35a411 is located in stack of thread T0 at offset 33 in frame
#0 0x55806ff57d42 in magma5g::create_sm_pdu_session(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, unsigned char*, unsigned int, unsigned int, unsigned int, unsigned char, unsigned char*, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >&, ambr_t const&, unsigned int, eps_subscribed_qos_profile_s const&) /home/vagrant/magma/lte/gateway/c/core/oai/lib/n11/SmfServiceClient.cpp:50
This frame has 5 object(s):
[32, 33) 'pti' (line 47) <== Memory access at offset 33 overflows this variable
[48, 88) 'req' (line 51)
[128, 184) 'qos_info' (line 52)
[224, 256) '<unknown>'
[288, 304) 'ipv4_str' (line 99)
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
Shadow bytes around the buggy address:
0x100039463430: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100039463440: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 01 f2
0x100039463450: 00 00 00 00 f2 f2 f2 f2 00 00 00 00 00 00 00 f3
0x100039463460: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
0x100039463470: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
=>0x100039463480: f1 f1[01]f2 00 00 00 00 00 f2 f2 f2 f2 f2 00 00
0x100039463490: 00 00 00 00 00 f2 f2 f2 f2 f2 f8 f8 f8 f8 f2 f2
0x1000394634a0: f2 f2 00 00 f3 f3 00 00 00 00 00 00 00 00 00 00
0x1000394634b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x1000394634c0: 00 00 f1 f1 f1 f1 f8 f2 f8 f2 f8 f2 01 f2 01 f2
0x1000394634d0: 01 f2 01 f2 01 f2 01 f2 01 f2 01 f2 01 f2 01 f2
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26587==ABORTING
Start 10: test_auth_service_client
10/25 Test #10: test_auth_service_client ................... Passed 0.60 sec
Start 11: test_s1ap
11/25 Test #11: test_s1ap ..................................Child aborted***Exception: 38.55 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200652.26591![==========] Running 37 tests from 4 test suites.
[----------] Global test environment set-up.
[----------] 28 tests from S1apMmeHandlersTest
[ RUN ] S1apMmeHandlersTest.HandleS1SetupRequestFailureHss
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1SetupRequestFailureHss (1226 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1SetupRequestFailureReseting
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1SetupRequestFailureReseting (1218 ms)
[ RUN ] S1apMmeHandlersTest.HandleCloseSctpAssociation
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200655.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleCloseSctpAssociation (1217 ms)
[ RUN ] S1apMmeHandlersTest.HandleICSResponseICSRelease
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200656.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleICSResponseICSRelease (1209 ms)
[ RUN ] S1apMmeHandlersTest.HandleICSFailure
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleICSFailure (1215 ms)
[ RUN ] S1apMmeHandlersTest.HandleUECapIndication
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200658.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleUECapIndication (1210 ms)
[ RUN ] S1apMmeHandlersTest.GenerateUEContextReleaseCommand
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200700.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.GenerateUEContextReleaseCommand (1207 ms)
[ RUN ] S1apMmeHandlersTest.HandleUEContextRelease
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleUEContextRelease (2222 ms)
[ RUN ] S1apMmeHandlersTest.HandleConnectionEstCnf
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200703.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleConnectionEstCnf (1219 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apErabRelCmd
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200704.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apErabRelCmd (1212 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apErabSetupReq
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apErabSetupReq (1221 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apErabReleaseComplete
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200706.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apErabReleaseComplete (1216 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apErabResetReq
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200708.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apErabResetReq (1461 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apUeCtxtModification
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apUeCtxtModification (1211 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apPathSwitchRequest
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200710.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apPathSwitchRequest (1208 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apPathSwitchFailure
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200712.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apPathSwitchFailure (1206 ms)
[ RUN ] S1apMmeHandlersTest.HandleMmeHandoverRequest
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200713.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleMmeHandoverRequest (1205 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apHandoverCommand
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apHandoverCommand (1422 ms)
[ RUN ] S1apMmeHandlersTest.HandleMmeHandover
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200715.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleMmeHandover (2230 ms)
[ RUN ] S1apMmeHandlersTest.HandleMmeHandoverFailure
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200717.26591!Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200718.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleMmeHandoverFailure (1217 ms)
[ RUN ] S1apMmeHandlersTest.HandleMmeHandoverCancel
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200719.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleMmeHandoverCancel (2236 ms)
[ RUN ] S1apMmeHandlersTest.HandleErabSetupResponse
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200721.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleErabSetupResponse (1218 ms)
[ RUN ] S1apMmeHandlersTest.HandleErrorIndicationMessage
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200722.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleErrorIndicationMessage (1228 ms)
[ RUN ] S1apMmeHandlersTest.HandleEnbResetPartial
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleEnbResetPartial (1247 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apPagingRequest
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200724.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apPagingRequest (1206 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apErabModificationCnf
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200726.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apErabModificationCnf (1211 ms)
[ RUN ] S1apMmeHandlersTest.HandlePathSwitchRequestSuccess
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200727.26591!TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandlePathSwitchRequestSuccess (1236 ms)
[ RUN ] S1apMmeHandlersTest.HandleS1apNasNonDelivery
GMOCK WARNING:
Uninteresting mock function call - returning directly.
Function call: sctpd_send_dl()
NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by blindly adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/master/googlemock/docs/cook_book.md#knowing-when-to-expect for details.
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200728.26591!
GMOCK WARNING:
Uninteresting mock function call - returning directly.
Function call: sctpd_send_dl()
NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by blindly adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/master/googlemock/docs/cook_book.md#knowing-when-to-expect for details.
TASK_S1AP terminated
[ OK ] S1apMmeHandlersTest.HandleS1apNasNonDelivery (1226 ms)
[----------] 28 tests from S1apMmeHandlersTest (37564 ms total)
[----------] 5 tests from test_s1ap_handle_new_association
[ RUN ] test_s1ap_handle_new_association.empty_initial_state
[ OK ] test_s1ap_handle_new_association.empty_initial_state (0 ms)
[ RUN ] test_s1ap_handle_new_association.shutdown
[ OK ] test_s1ap_handle_new_association.shutdown (0 ms)
[ RUN ] test_s1ap_handle_new_association.resetting
[ OK ] test_s1ap_handle_new_association.resetting (0 ms)
[ RUN ] test_s1ap_handle_new_association.reassociate
[ OK ] test_s1ap_handle_new_association.reassociate (0 ms)
[ RUN ] test_s1ap_handle_new_association.clean_stale_association
[ OK ] test_s1ap_handle_new_association.clean_stale_association (0 ms)
[----------] 5 tests from test_s1ap_handle_new_association (1 ms total)
[----------] 1 test from test_s1ap_state_manager
[ RUN ] test_s1ap_state_manager.free_state_idempotent
[ OK ] test_s1ap_state_manager.free_state_idempotent (1 ms)
[----------] 1 test from test_s1ap_state_manager (1 ms total)
[----------] 3 tests from S1APStateConverterTest
[ RUN ] S1APStateConverterTest.S1apStateConversionSuccess
=================================================================
==26591==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffc4dfef426 at pc 0x7fd233e89a6d bp 0x7ffc4dfef290 sp 0x7ffc4dfeea38
READ of size 7 at 0x7ffc4dfef426 thread T0
#0 0x7fd233e89a6c (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
#1 0x7fd2334f8f68 in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::assign(char const*) (/lib/x86_64-linux-gnu/libstdc++.so.6+0x143f68)
#2 0x55e774b87fbe in magma::lte::oai::SupportedTaiItems::add_bplmns(char const*) tasks/s1ap/lte/protos/oai/s1ap_state.pb.h:1465
#3 0x55e774b85cac in magma::lte::S1apStateConverter::supported_tai_item_to_proto(supported_tai_items_s const*, magma::lte::oai::SupportedTaiItems*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/s1ap/s1ap_state_converter.cpp:282
#4 0x55e774b848b9 in magma::lte::S1apStateConverter::supported_ta_list_to_proto(supported_ta_list_s const*, magma::lte::oai::SupportedTaList*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/s1ap/s1ap_state_converter.cpp:245
#5 0x55e774b7c9f0 in magma::lte::S1apStateConverter::enb_to_proto(enb_description_s*, magma::lte::oai::EnbDescription*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/s1ap/s1ap_state_converter.cpp:126
#6 0x55e774b8c7c3 in std::_Function_handler<void (enb_description_s*, magma::lte::oai::EnbDescription*), void (*)(enb_description_s*, magma::lte::oai::EnbDescription*)>::_M_invoke(std::_Any_data const&, enb_description_s*&&, magma::lte::oai::EnbDescription*&&) /usr/include/c++/9/bits/std_function.h:300
#7 0x55e774b8cfb1 in std::function<void (enb_description_s*, magma::lte::oai::EnbDescription*)>::operator()(enb_description_s*, magma::lte::oai::EnbDescription*) const /usr/include/c++/9/bits/std_function.h:688
#8 0x55e774b8a33f in void magma::lte::StateConverter::hashtable_ts_to_proto<enb_description_s, magma::lte::oai::EnbDescription>(hash_table_ts_s*, google::protobuf::Map<unsigned int, magma::lte::oai::EnbDescription>*, std::function<void (enb_description_s*, magma::lte::oai::EnbDescription*)>, log_proto_t) /home/vagrant/magma/lte/gateway/c/core/oai/include/state_converter.h:97
#9 0x55e774b77f92 in magma::lte::S1apStateConverter::state_to_proto(s1ap_state_s*, magma::lte::oai::S1apState*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/s1ap/s1ap_state_converter.cpp:34
#10 0x55e7748af265 in magma::lte::S1APStateConverterTest_S1apStateConversionSuccess_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/s1ap_task/test_s1ap_state_converter.cpp:85
#11 0x55e774be5501 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16d4501)
#12 0x55e774bde1d0 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16cd1d0)
#13 0x55e774bb9257 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16a8257)
#14 0x55e774bb9c50 in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16a8c50)
#15 0x55e774bba395 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16a9395)
#16 0x55e774bc647b in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16b547b)
#17 0x55e774be6a1d in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16d5a1d)
#18 0x55e774bdf40e in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16ce40e)
#19 0x55e774bc4c97 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x16b3c97)
#20 0x55e7746e0ca4 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#21 0x55e7746e0978 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/s1ap_task/s1ap_test.cpp:23
#22 0x7fd2328600b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#23 0x55e7746d77fd in _start (/home/vagrant/build/c/core/oai/test/s1ap_task/s1ap_test+0x11c67fd)
Address 0x7ffc4dfef426 is located in stack of thread T0 at offset 38 in frame
#0 0x55e774b84e43 in magma::lte::S1apStateConverter::supported_tai_item_to_proto(supported_tai_items_s const*, magma::lte::oai::SupportedTaiItems*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/s1ap/s1ap_state_converter.cpp:264
This frame has 1 object(s):
[32, 38) 'plmn_array' (line 268) <== Memory access at offset 38 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
Shadow bytes around the buggy address:
0x100009bf5e30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100009bf5e40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100009bf5e50: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
0x100009bf5e60: f1 f1 01 f2 00 00 00 00 00 00 00 f3 f3 f3 f3 f3
0x100009bf5e70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x100009bf5e80: f1 f1 f1 f1[06]f3 f3 f3 00 00 00 00 00 00 00 00
0x100009bf5e90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100009bf5ea0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100009bf5eb0: f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00
0x100009bf5ec0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100009bf5ed0: f1 f1 f1 f1 f1 f1 04 f2 00 f2 f2 f2 00 00 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26591==ABORTING
Start 12: test_nas_converter
12/25 Test #12: test_nas_converter .........................Child aborted***Exception: 0.99 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200730.26709![==========] Running 6 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 6 tests from NasStateConverterTest
[ RUN ] NasStateConverterTest.TestEmmContextConversion
=================================================================
==26709==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fff6d26e886 at pc 0x7f8740e72a6d bp 0x7fff6d26e6c0 sp 0x7fff6d26de68
READ of size 7 at 0x7fff6d26e886 thread T0
#0 0x7f8740e72a6c (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
#1 0x7f874018e9cb in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string(char const*, std::allocator<char> const&) (/lib/x86_64-linux-gnu/libstdc++.so.6+0x1459cb)
#2 0x5574466a995e in magma::lte::oai::Guti::set_plmn(char const*) common/lte/protos/oai/common_types.pb.h:971
#3 0x55744669f0dd in magma::lte::StateConverter::guti_to_proto(guti_s const&, magma::lte::oai::Guti*) /home/vagrant/magma/lte/gateway/c/core/oai/common/state_converter.cpp:58
#4 0x5574455ef3b0 in magma::lte::NasStateConverter::nas_attach_proc_to_proto(nas_emm_attach_proc_s const*, magma::lte::oai::AttachProc*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas/nas_state_converter.cpp:767
#5 0x5574455ff7e8 in magma::lte::NasStateConverter::emm_specific_proc_to_proto(nas_emm_specific_proc_s const*, magma::lte::oai::NasEmmProcWithType*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas/nas_state_converter.cpp:1108
#6 0x5574456089ad in magma::lte::NasStateConverter::emm_procedures_to_proto(emm_procedures_s const*, magma::lte::oai::EmmProcedures*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas/nas_state_converter.cpp:1411
#7 0x557445613c38 in magma::lte::NasStateConverter::emm_context_to_proto(emm_context_s const*, magma::lte::oai::EmmContext*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/nas/nas_state_converter.cpp:1638
#8 0x55744559d232 in magma::lte::NasStateConverterTest_TestEmmContextConversion_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/nas/test_nas_converter.cpp:96
#9 0x557445f14d10 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2433
#10 0x557445f14d10 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) googletest/src/gtest.cc:2469
#11 0x557445f08065 in testing::Test::Run() googletest/src/gtest.cc:2508
#12 0x557445f08065 in testing::Test::Run() googletest/src/gtest.cc:2498
#13 0x557445f081c4 in testing::TestInfo::Run() googletest/src/gtest.cc:2684
#14 0x557445f081c4 in testing::TestInfo::Run() googletest/src/gtest.cc:2657
#15 0x557445f082ac in testing::TestSuite::Run() googletest/src/gtest.cc:2816
#16 0x557445f082ac in testing::TestSuite::Run() googletest/src/gtest.cc:2795
#17 0x557445f087cb in testing::internal::UnitTestImpl::RunAllTests() googletest/src/gtest.cc:5338
#18 0x557445f15280 in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2433
#19 0x557445f15280 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) googletest/src/gtest.cc:2469
#20 0x557445f089fb in testing::UnitTest::Run() googletest/src/gtest.cc:4925
#21 0x5574455a7ef6 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#22 0x5574455a48c0 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/nas/test_nas_converter.cpp:195
#23 0x7f873f3a70b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#24 0x55744559b1ad in _start (/home/vagrant/build/c/core/oai/test/nas/test_nas_converter+0x1c4c1ad)
Address 0x7fff6d26e886 is located in stack of thread T0 at offset 38 in frame
#0 0x55744669ecdf in magma::lte::StateConverter::guti_to_proto(guti_s const&, magma::lte::oai::Guti*) /home/vagrant/magma/lte/gateway/c/core/oai/common/state_converter.cpp:53
This frame has 1 object(s):
[32, 38) 'plmn_array' (line 56) <== Memory access at offset 38 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
Shadow bytes around the buggy address:
0x10006da45cc0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006da45cd0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006da45ce0: 00 00 f1 f1 f1 f1 01 f2 01 f2 00 00 00 00 f2 f2
0x10006da45cf0: f2 f2 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00
0x10006da45d00: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
=>0x10006da45d10:[06]f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
0x10006da45d20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006da45d30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x10006da45d40: 00 00 00 00 00 00 f1 f1 f1 f1 01 f2 01 f2 01 f2
0x10006da45d50: 04 f2 00 00 00 f2 00 00 00 f2 00 00 00 f2 00 00
0x10006da45d60: 00 f2 00 00 00 f2 00 00 00 f2 00 00 00 f2 00 00
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26709==ABORTING
Start 13: test_bstr
13/25 Test #13: test_bstr .................................. Passed 0.03 sec
Start 14: test_3gpp
14/25 Test #14: test_3gpp ..................................***Failed 0.08 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200731.26719![==========] Running 6 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 6 tests from m3GppTest
[ RUN ] m3GppTest.TestImeiMobileIdentity
[ OK ] m3GppTest.TestImeiMobileIdentity (1 ms)
[ RUN ] m3GppTest.TestTmgiMobileIdentity
[ OK ] m3GppTest.TestTmgiMobileIdentity (0 ms)
[ RUN ] m3GppTest.TestNoMobileIdentity
[ OK ] m3GppTest.TestNoMobileIdentity (0 ms)
[ RUN ] m3GppTest.TestImsiMobileIdentity
[ OK ] m3GppTest.TestImsiMobileIdentity (0 ms)
[ RUN ] m3GppTest.TestMobileStationClassmark2
/home/vagrant/magma/lte/gateway/c/core/oai/test/lib/test_3gpp.cpp:276: Failure
Value of: !(memcmp((const void*)&msclassmark2, (const void*)&msclassmark2_decoded, sizeof(mobile_station_classmark2_t)))
Actual: false
Expected: true
/home/vagrant/magma/lte/gateway/c/core/oai/test/lib/test_3gpp.cpp:285: Failure
Value of: !(memcmp((const void*)&msclassmark2, (const void*)&msclassmark2_decoded, sizeof(mobile_station_classmark2_t)))
Actual: false
Expected: true
[ FAILED ] m3GppTest.TestMobileStationClassmark2 (0 ms)
[ RUN ] m3GppTest.TestPlmnList
[ OK ] m3GppTest.TestPlmnList (0 ms)
[----------] 6 tests from m3GppTest (1 ms total)
[----------] Global test environment tear-down
[==========] 6 tests from 1 test suite ran. (1 ms total)
[ PASSED ] 5 tests.
[ FAILED ] 1 test, listed below:
[ FAILED ] m3GppTest.TestMobileStationClassmark2
1 FAILED TEST
Start 15: test_openflow_controller
15/25 Test #15: test_openflow_controller ................... Passed 0.04 sec
Start 16: test_imsi_encoder
16/25 Test #16: test_imsi_encoder .......................... Passed 0.02 sec
Start 17: test_gtp_app
17/25 Test #17: test_gtp_app ...............................Child aborted***Exception: 0.48 sec
Running main() from gmock_main.cc
[==========] Running 14 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 14 tests from GTPApplicationTest
[ RUN ] GTPApplicationTest.TestAddTunnel
[ OK ] GTPApplicationTest.TestAddTunnel (7 ms)
[ RUN ] GTPApplicationTest.TestDeleteTunnel
[ OK ] GTPApplicationTest.TestDeleteTunnel (1 ms)
[ RUN ] GTPApplicationTest.TestAddTunnelDlFlow
[ OK ] GTPApplicationTest.TestAddTunnelDlFlow (3 ms)
[ RUN ] GTPApplicationTest.TestDeleteTunnelDlFlow
[ OK ] GTPApplicationTest.TestDeleteTunnelDlFlow (2 ms)
[ RUN ] GTPApplicationTest.TestAddTunnelDlFlowGtpPort
[ OK ] GTPApplicationTest.TestAddTunnelDlFlowGtpPort (2 ms)
[ RUN ] GTPApplicationTest.TestDeleteTunnelDlFlowGtpPort
[ OK ] GTPApplicationTest.TestDeleteTunnelDlFlowGtpPort (2 ms)
[ RUN ] GTPApplicationTest.TestAddTunnelIpv6
=================================================================
==26731==ERROR: AddressSanitizer: global-buffer-overflow on address 0x55f0394ade14 at pc 0x55f038bb4bfd bp 0x7ffc1068af40 sp 0x7ffc1068af30
READ of size 1 at 0x55f0394ade14 thread T0
#0 0x55f038bb4bfc in mask_ipv6_address /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:295
#1 0x55f038bb52b1 in add_downlink_match_ipv6 /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:314
#2 0x55f038bc08a8 in openflow::GTPApplication::add_downlink_tunnel_flow_ipv6(openflow::AddGTPTunnelEvent const&, openflow::OpenflowMessenger const&, unsigned int, bool, bool) /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:491
#3 0x55f038bc28ef in openflow::GTPApplication::add_downlink_tunnel_flow(openflow::AddGTPTunnelEvent const&, openflow::OpenflowMessenger const&, unsigned int, bool, bool) /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:525
#4 0x55f038ba095c in openflow::GTPApplication::event_callback(openflow::ControllerEvent const&, openflow::OpenflowMessenger const&) /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:55
#5 0x55f038b6c1d0 in openflow::OpenflowController::dispatch_event(openflow::ControllerEvent const&) /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/OpenflowController.cpp:107
#6 0x55f038a6d55f in TestBody /home/vagrant/magma/lte/gateway/c/core/oai/test/openflow/test_gtp_app.cpp:607
#7 0x55f038d83aaf in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7d0aaf)
#8 0x55f038d7c920 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7c9920)
#9 0x55f038d57dd7 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7a4dd7)
#10 0x55f038d587d0 in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7a57d0)
#11 0x55f038d58f15 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7a5f15)
#12 0x55f038d64ffb in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7b1ffb)
#13 0x55f038d84fb9 in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7d1fb9)
#14 0x55f038d7dae4 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7caae4)
#15 0x55f038d63817 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x7b0817)
#16 0x55f038b07083 in RUN_ALL_TESTS() (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x554083)
#17 0x55f038d4f7f0 in main (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x79c7f0)
#18 0x7f39869030b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#19 0x55f038a3862d in _start (/home/vagrant/build/c/core/oai/test/openflow/gtp_app_test+0x48562d)
0x55f0394ade14 is located 0 bytes to the right of global variable 'mask' defined in '/home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:303:20' (0x55f0394ade00) of size 20
0x55f0394ade14 is located 44 bytes to the left of global variable 'guard variable for openflow::add_downlink_match_ipv6(fluid_msg::of13::FlowMod&, in6_addr const&, unsigned int)::mask' defined in '/home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:303:20' (0x55f0394ade40) of size 8
SUMMARY: AddressSanitizer: global-buffer-overflow /home/vagrant/magma/lte/gateway/c/core/oai/lib/openflow/controller/GTPApplication.cpp:295 in mask_ipv6_address
Shadow bytes around the buggy address:
0x0abe8728db70: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9
0x0abe8728db80: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
0x0abe8728db90: 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 f9
0x0abe8728dba0: f9 f9 f9 f9 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9
0x0abe8728dbb0: 04 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 f9 f9 f9 f9
=>0x0abe8728dbc0: 00 00[04]f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
0x0abe8728dbd0: 00 00 04 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9
0x0abe8728dbe0: 00 00 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00
0x0abe8728dbf0: 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 00 00 00 f9
0x0abe8728dc00: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00
0x0abe8728dc10: 00 00 00 f9 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26731==ABORTING
Start 18: test_spgw_service_impl
18/25 Test #18: test_spgw_service_impl ..................... Passed 0.23 sec
Start 19: test_spgw_state_converter
19/25 Test #19: test_spgw_state_converter ..................Child aborted***Exception: 0.53 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200732.26736![==========] Running 2 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 2 tests from SPGWStateConverterTest
[ RUN ] SPGWStateConverterTest.TestSPGWStateConversion
[ OK ] SPGWStateConverterTest.TestSPGWStateConversion (1 ms)
[ RUN ] SPGWStateConverterTest.TestUEContextConversion
=================================================================
==26736==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffe4cc420e6 at pc 0x7f6f3a007a6d bp 0x7ffe4cc41f20 sp 0x7ffe4cc416c8
READ of size 7 at 0x7ffe4cc420e6 thread T0
#0 0x7f6f3a007a6c (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
#1 0x7f6f396789cb in std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string(char const*, std::allocator<char> const&) (/lib/x86_64-linux-gnu/libstdc++.so.6+0x1459cb)
#2 0x55a4f067d8c4 in magma::lte::oai::Ecgi::set_plmn(char const*) common/lte/protos/oai/common_types.pb.h:1070
#3 0x55a4f06731af in magma::lte::StateConverter::ecgi_to_proto(ecgi_s const&, magma::lte::oai::Ecgi*) /home/vagrant/magma/lte/gateway/c/core/oai/common/state_converter.cpp:79
#4 0x55a4f00c5502 in magma::lte::SpgwStateConverter::spgw_bearer_context_to_proto(s_plus_p_gw_eps_bearer_context_information_s const*, magma::lte::oai::S11BearerContext*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/spgw_state_converter.cpp:75
#5 0x55a4f00f8bbb in magma::lte::SpgwStateConverter::ue_to_proto(spgw_ue_context_s const*, magma::lte::oai::SpgwUeContext*) /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/spgw_state_converter.cpp:972
#6 0x55a4efdf640e in magma::lte::SPGWStateConverterTest_TestUEContextConversion_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/test_spgw_state_converter.cpp:87
#7 0x55a4f086c923 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x1a0f923)
#8 0x55a4f0865a54 in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x1a08a54)
#9 0x55a4f0841441 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x19e4441)
#10 0x55a4f0841e3a in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x19e4e3a)
#11 0x55a4f084257f in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x19e557f)
#12 0x55a4f084e665 in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x19f1665)
#13 0x55a4f086de2d in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x1a10e2d)
#14 0x55a4f0866c18 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x1a09c18)
#15 0x55a4f084ce81 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0x19efe81)
#16 0x55a4efdfe3c2 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#17 0x55a4efe16650 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/spgw_test.cpp:23
#18 0x7f6f389de0b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#19 0x55a4efdf265d in _start (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_state_converter_test+0xf9565d)
Address 0x7ffe4cc420e6 is located in stack of thread T0 at offset 38 in frame
#0 0x55a4f0672db1 in magma::lte::StateConverter::ecgi_to_proto(ecgi_s const&, magma::lte::oai::Ecgi*) /home/vagrant/magma/lte/gateway/c/core/oai/common/state_converter.cpp:74
This frame has 1 object(s):
[32, 38) 'plmn_array' (line 77) <== Memory access at offset 38 overflows this variable
HINT: this may be a false positive if your program uses some custom stack unwind mechanism, swapcontext or vfork
(longjmp and C++ exceptions *are* supported)
SUMMARY: AddressSanitizer: stack-buffer-overflow (/lib/x86_64-linux-gnu/libasan.so.5+0x67a6c)
Shadow bytes around the buggy address:
0x1000499803c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x1000499803d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x1000499803e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
0x1000499803f0: f1 f1 01 f2 01 f2 00 00 00 00 f2 f2 f2 f2 00 00
0x100049980400: 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00
=>0x100049980410: 00 00 00 00 00 00 00 00 f1 f1 f1 f1[06]f3 f3 f3
0x100049980420: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100049980430: 00 00 00 00 f1 f1 f1 f1 01 f2 01 f2 00 f2 f2 f2
0x100049980440: 00 00 00 00 f2 f2 f2 f2 00 00 00 00 f3 f3 f3 f3
0x100049980450: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x100049980460: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26736==ABORTING
Start 20: test_spgw_procedures
20/25 Test #20: test_spgw_procedures .......................Child aborted***Exception: 4.65 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200733.26751![==========] Running 15 tests from 1 test suite.
[----------] Global test environment set-up.
[----------] 15 tests from SPGWAppProcedureTest
[ RUN ] SPGWAppProcedureTest.TestCreateSessionSuccess
Running setup
/home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/pgw_pcef_emulation.c:321:26: runtime error: shift exponent 32 is too large for 32-bit type 'unsigned int'
Setup done
/home/vagrant/magma/lte/gateway/c/core/oai/lib/pcef/pcef_handlers.cpp:344:39: runtime error: index -1 out of bounds for type 'unsigned char [15]'
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200734.26751!Cleaning up SPGW configsTASK_SPGW_APP terminated
[ OK ] SPGWAppProcedureTest.TestCreateSessionSuccess (3040 ms)
[ RUN ] SPGWAppProcedureTest.TestCreateSessionIPAllocFailure
Running setup
Setup done
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200737.26751!=================================================================
==26751==ERROR: AddressSanitizer: heap-use-after-free on address 0x61900000dc84 at pc 0x564eb24d6cba bp 0x7ffc3b84c7b0 sp 0x7ffc3b84c7a0
READ of size 4 at 0x61900000dc84 thread T0
GMOCK WARNING:
Uninteresting mock function call - returning directly.
Function call: mme_app_handle_create_sess_resp()
NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by blindly adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/master/googlemock/docs/cook_book.md#knowing-when-to-expect for details.
#0 0x564eb24d6cb9 in magma::lte::SPGWAppProcedureTest_TestCreateSessionIPAllocFailure_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/test_spgw_procedures.cpp:428
#1 0x564eb546f9b5 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a639b5)
#2 0x564eb5468c4c in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5cc4c)
#3 0x564eb54445b3 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a385b3)
#4 0x564eb5444fac in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a38fac)
#5 0x564eb54456f1 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a396f1)
#6 0x564eb54517d7 in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a457d7)
#7 0x564eb5470ebf in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a64ebf)
#8 0x564eb5469e10 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5de10)
#9 0x564eb544fff3 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a43ff3)
#10 0x564eb25fd211 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#11 0x564eb25fcee5 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/spgw_test.cpp:23
#12 0x7f33fe1220b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#13 0x564eb24c713d in _start (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x4abb13d)
0x61900000dc84 is located 4 bytes inside of 912-byte region [0x61900000dc80,0x61900000e010)
freed by thread T0 here:
#0 0x7f33ffdf57cf in __interceptor_free (/lib/x86_64-linux-gnu/libasan.so.5+0x10d7cf)
#1 0x564eb4ef147d in free_wrapper /home/vagrant/magma/lte/gateway/c/core/oai/common/dynamic_memory_check.c:47
#2 0x564eb2664702 in sgw_free_eps_bearer_context /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/spgw_state.cpp:118
#3 0x564eb2664449 in sgw_free_pdn_connection /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/spgw_state.cpp:107
#4 0x564eb2663e14 in spgw_free_s11_bearer_context_information /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/spgw_state.cpp:85
#5 0x564eb4f38962 in hashtable_ts_free /home/vagrant/magma/lte/gateway/c/core/oai/lib/hashtable/hashtable.c:671
#6 0x564eb2649cf0 in sgw_cm_remove_bearer_context_information /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/sgw_context_manager.c:195
#7 0x564eb262e89c in handle_s5_create_session_response /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/sgw_handlers.c:1416
#8 0x564eb263602e in sgw_handle_ip_allocation_rsp /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/sgw_handlers.c:1905
#9 0x564eb24d6b82 in magma::lte::SPGWAppProcedureTest_TestCreateSessionIPAllocFailure_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/test_spgw_procedures.cpp:424
#10 0x564eb546f9b5 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a639b5)
#11 0x564eb5468c4c in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5cc4c)
#12 0x564eb54445b3 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a385b3)
#13 0x564eb5444fac in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a38fac)
#14 0x564eb54456f1 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a396f1)
#15 0x564eb54517d7 in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a457d7)
#16 0x564eb5470ebf in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a64ebf)
#17 0x564eb5469e10 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5de10)
#18 0x564eb544fff3 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a43ff3)
#19 0x564eb25fd211 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#20 0x564eb25fcee5 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/spgw_test.cpp:23
#21 0x7f33fe1220b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
previously allocated by thread T0 here:
#0 0x7f33ffdf5dc6 in calloc (/lib/x86_64-linux-gnu/libasan.so.5+0x10ddc6)
#1 0x564eb264ab8e in sgw_cm_create_eps_bearer_ctxt_in_collection /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/sgw_context_manager.c:242
#2 0x564eb261b48d in sgw_handle_s11_create_session_request /home/vagrant/magma/lte/gateway/c/core/oai/tasks/sgw/sgw_handlers.c:225
#3 0x564eb24d5077 in magma::lte::SPGWAppProcedureTest_TestCreateSessionIPAllocFailure_Test::TestBody() /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/test_spgw_procedures.cpp:394
#4 0x564eb546f9b5 in void testing::internal::HandleSehExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a639b5)
#5 0x564eb5468c4c in void testing::internal::HandleExceptionsInMethodIfSupported<testing::Test, void>(testing::Test*, void (testing::Test::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5cc4c)
#6 0x564eb54445b3 in testing::Test::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a385b3)
#7 0x564eb5444fac in testing::TestInfo::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a38fac)
#8 0x564eb54456f1 in testing::TestSuite::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a396f1)
#9 0x564eb54517d7 in testing::internal::UnitTestImpl::RunAllTests() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a457d7)
#10 0x564eb5470ebf in bool testing::internal::HandleSehExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a64ebf)
#11 0x564eb5469e10 in bool testing::internal::HandleExceptionsInMethodIfSupported<testing::internal::UnitTestImpl, bool>(testing::internal::UnitTestImpl*, bool (testing::internal::UnitTestImpl::*)(), char const*) (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a5de10)
#12 0x564eb544fff3 in testing::UnitTest::Run() (/home/vagrant/build/c/core/oai/test/spgw_task/spgw_procedures_test+0x7a43ff3)
#13 0x564eb25fd211 in RUN_ALL_TESTS() /usr/include/gtest/gtest.h:2473
#14 0x564eb25fcee5 in main /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/spgw_test.cpp:23
#15 0x7f33fe1220b2 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
SUMMARY: AddressSanitizer: heap-use-after-free /home/vagrant/magma/lte/gateway/c/core/oai/test/spgw_task/test_spgw_procedures.cpp:428 in magma::lte::SPGWAppProcedureTest_TestCreateSessionIPAllocFailure_Test::TestBody()
Shadow bytes around the buggy address:
0x0c327fff9b40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c327fff9b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c327fff9b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0x0c327fff9b70: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa
0x0c327fff9b80: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
=>0x0c327fff9b90:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c327fff9ba0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c327fff9bb0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c327fff9bc0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c327fff9bd0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
0x0c327fff9be0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
Shadow gap: cc
==26751==ABORTING
Start 21: test_pgw_pco
21/25 Test #21: test_pgw_pco ............................... Passed 0.22 sec
Start 22: test_spgw_procedures_with_injected_state
22/25 Test #22: test_spgw_procedures_with_injected_state ... Passed 21.37 sec
Start 23: test_pipelined_client
23/25 Test #23: test_pipelined_client ...................... Passed 0.07 sec
Start 24: test_sgw_s8
24/25 Test #24: test_sgw_s8 ................................***Failed 6.83 sec
Initializing OAI Logging
Initializing OAI Logging to syslog
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200759.26843![==========] Running 21 tests from 2 test suites.
[----------] Global test environment set-up.
[----------] 19 tests from SgwS8ConfigAndCreateMock
[ RUN ] SgwS8ConfigAndCreateMock.create_context_on_cs_req_success
/home/vagrant/magma/lte/gateway/c/core/oai/lib/pcef/pcef_handlers.cpp:344:39: runtime error: index -1 out of bounds for type 'unsigned char [15]'
TASK_SGW_S8 terminated
[ OK ] SgwS8ConfigAndCreateMock.create_context_on_cs_req_success (1023 ms)
[ RUN ] SgwS8ConfigAndCreateMock.create_context_on_cs_req
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200800.26843!TASK_SGW_S8 terminated
[ OK ] SgwS8ConfigAndCreateMock.create_context_on_cs_req (1015 ms)
[ RUN ] SgwS8ConfigAndCreateMock.update_pdn_session_on_cs_rsp
Directoryd RPC failed with code 14, msg: Connect Failed
Directoryd RPC failed with code 14, msg: Connect Failed
TASK_SGW_S8 terminated
[ OK ] SgwS8ConfigAndCreateMock.update_pdn_session_on_cs_rsp (1029 ms)
[ RUN ] SgwS8ConfigAndCreateMock.recv_different_temporary_create_session_procedure_id_on_cs_rsp
TASK_SGW_S8 terminated
[ OK ] SgwS8ConfigAndCreateMock.recv_different_temporary_create_session_procedure_id_on_cs_rsp (1017 ms)
[ RUN ] SgwS8ConfigAndCreateMock.recv_different_sgw_s8_teid
Could not create logging file: Permission denied
COULD NOT CREATE A LOGGINGFILE 20220301-200804.26843!Directoryd RPC failed with code 14, msg: Connect Failed
GMOCK WARNING:
Uninteresting mock function call - returning directly.
Function call: mme_app_handle_create_sess_resp()
NOTE: You can safely ignore the above warning unless this call should not happen. Do not suppress it by blindly adding an EXPECT_CALL() if you don't mean to enforce the call. See https://github.com/google/googletest/blob/master/googlemock/docs/cook_book.md#knowing-when-to-expect for details.
TASK_SGW_S8 terminated
Directoryd RPC failed with code 14, msg: Connect Failed
[ OK ] SgwS8ConfigAndCreateMock.recv_different_sgw_s8_teid (1012 ms)
[ RUN ] SgwS8ConfigAndCreateMock.failed_to_get_bearer_context_on_cs_rsp
TASK_SGW_S8 terminated
[ OK ] SgwS8ConfigAndCreateMock.failed_to_get_bearer_context_on_cs_rsp (1026 ms)
[ RUN ] SgwS8ConfigAndCreateMock.delete_session_req_handling
/home/vagrant/magma/lte/gateway/c/core/oai/test/sgw_s8_task/sgw_s8_utility.h:69:1: runtime error: execution reached the end of a value-returning function without returning a value
Start 25: test_s6a
25/25 Test #25: test_s6a ................................... Passed 2.72 sec
56% tests passed, 11 tests failed out of 25
Total Test time (real) = 86.41 sec
The following tests FAILED:
5 - test_mme_app (Child aborted)
6 - test_ngap (Child aborted)
8 - test_amf_app (Child aborted)
9 - test_smf_service_client (Child aborted)
11 - test_s1ap (Child aborted)
12 - test_nas_converter (Child aborted)
14 - test_3gpp (Failed)
17 - test_gtp_app (Child aborted)
19 - test_spgw_state_converter (Child aborted)
20 - test_spgw_procedures (Child aborted)
24 - test_sgw_s8 (Failed)
Errors while running CTest
make: *** [Makefile:218: test_oai] Error 8
vagrant@magma-dev-focal:~/magma/lte/gateway$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment