<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Issue</th>
<td>
<a href=https://github.com/llvm/llvm-project/issues/62592>62592</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>
AddressSanitizer: use-after-poison when calling clang::CompilerInstance::createPreprocessor
</td>
</tr>
<tr>
<th>Labels</th>
<td>
new issue
</td>
</tr>
<tr>
<th>Assignees</th>
<td>
</td>
</tr>
<tr>
<th>Reporter</th>
<td>
jerry-tom
</td>
</tr>
</table>
<pre>
we are experiencing a AddressSanitizer: use-after-poison error w/ stack trace:
```
==83195==ERROR: AddressSanitizer: use-after-poison on address 0x000106201590 at pc 0x000100e58f34 bp 0x00016eff9bf0 sp 0x00016eff9be8
READ of size 8 at 0x000106201590 thread T0
#0 0x100e58f30 in clang::IdentifierInfo::isOutOfDate() const IdentifierTable.h:415
#1 0x100e58890 in clang::Preprocessor::MacroState::getModuleInfo(clang::Preprocessor&, clang::IdentifierInfo const*) const Preprocessor.h:830
#2 0x10147fb5c in clang::Preprocessor::appendMacroDirective(clang::IdentifierInfo*, clang::MacroDirective*)+0xf4 (bkcheck_front:arm64+0x10067bb5c) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#3 0x101481b34 in clang::Preprocessor::RegisterBuiltinMacros()+0x64 (bkcheck_front:arm64+0x10067db34) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#4 0x10149beac in clang::Preprocessor::Preprocessor(std::__1::shared_ptr<clang::PreprocessorOptions>, clang::DiagnosticsEngine&, clang::LangOptions&, clang::SourceManager&, clang::HeaderSearch&, clang::ModuleLoader&, clang::IdentifierInfoLookup*, bool, clang::TranslationUnitKind)+0x534 (bkcheck_front:arm64+0x100697eac) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#5 0x101d589b0 in clang::CompilerInstance::createPreprocessor(clang::TranslationUnitKind)+0x160 (bkcheck_front:arm64+0x100f549b0) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#6 0x100e0f1a4 in PreProcess::Init() preprocess.cpp:416
#7 0x100e0ec10 in PreProcess::PreProcess() preprocess.cpp:39
#8 0x100e0f5a4 in PreProcess::PreProcess() preprocess.cpp:38
#9 0x100eae7e4 in CheckFront::CheckFront() checkfront.cpp:7
#10 0x100eae89c in CheckFront::CheckFront() checkfront.cpp:6
#11 0x100e09430 in main bkcheck_front.cpp:116
#12 0x18845bf24 (<unknown module>)
0x000106201590 is located 144 bytes inside of 4096-byte region [0x000106201500,0x000106202500)
allocated by thread T0 here:
#0 0x10318b5cc in wrap_posix_memalign+0xa4 (libclang_rt.asan_osx_dynamic.dylib:arm64e+0x435cc) (BuildId: f0a7ac5c49bc3abc851181b6f92b308a32000000200000000100000000000b00)
#1 0x18876ea18 in operator new(unsigned long, std::align_val_t)+0x38 (libc++abi.dylib:arm64e+0x17a18) (BuildId: fa1e66a848dd3435a00e4fcd9bf5de6932000000200000000100000000030d00)
#2 0x100e5a7a0 in llvm::MallocAllocator::Allocate(unsigned long, unsigned long) AllocatorBase.h:86
#3 0x100e5af68 in llvm::BumpPtrAllocatorImpl<llvm::MallocAllocator, 4096ul, 4096ul, 128ul>::StartNewSlab() Allocator.h:339
#4 0x100e5a154 in llvm::BumpPtrAllocatorImpl<llvm::MallocAllocator, 4096ul, 4096ul, 128ul>::Allocate(unsigned long, llvm::Align) Allocator.h:195
#5 0x1014a2778 in std::__1::pair<llvm::StringMapIterator<clang::IdentifierInfo*>, bool> llvm::StringMap<clang::IdentifierInfo*, llvm::BumpPtrAllocatorImpl<llvm::MallocAllocator, 4096ul, 4096ul, 128ul>>::try_emplace<std::nullptr_t>(llvm::StringRef, std::nullptr_t&&)+0x78 (bkcheck_front:arm64+0x10069e778) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#6 0x1014a25c8 in clang::IdentifierTable::get(llvm::StringRef)+0x28 (bkcheck_front:arm64+0x10069e5c8) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#7 0x10149bd40 in clang::Preprocessor::Preprocessor(std::__1::shared_ptr<clang::PreprocessorOptions>, clang::DiagnosticsEngine&, clang::LangOptions&, clang::SourceManager&, clang::HeaderSearch&, clang::ModuleLoader&, clang::IdentifierInfoLookup*, bool, clang::TranslationUnitKind)+0x3c8 (bkcheck_front:arm64+0x100697d40) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#8 0x101d589b0 in clang::CompilerInstance::createPreprocessor(clang::TranslationUnitKind)+0x160 (bkcheck_front:arm64+0x100f549b0) (BuildId: 36c9bb3c2a7e30c49ec25b82b5646e6a32000000200000000100000000000d00)
#9 0x100e0f1a4 in PreProcess::Init() preprocess.cpp:416
#10 0x100e0ec10 in PreProcess::PreProcess() preprocess.cpp:39
#11 0x100e0f5a4 in PreProcess::PreProcess() preprocess.cpp:38
#12 0x100eae7e4 in CheckFront::CheckFront() checkfront.cpp:7
#13 0x100eae89c in CheckFront::CheckFront() checkfront.cpp:6
#14 0x100e09430 in main bkcheck_front.cpp:116
#15 0x18845bf24 (<unknown module>)
SUMMARY: AddressSanitizer: use-after-poison IdentifierTable.h:415 in clang::IdentifierInfo::isOutOfDate() const
Shadow bytes around the buggy address:
0x007020c60260: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x007020c60270: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x007020c60280: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x007020c60290: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x007020c602a0: 00 00 00 04 f7 f7 f7 00 00 00 03 f7 f7 f7 00 00
=>0x007020c602b0: 00 01[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x007020c602c0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x007020c602d0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x007020c602e0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x007020c602f0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
0x007020c60300: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
Left alloca redzone: ca
Right alloca redzone: cb
==83195==ABORTING
```
the code :
```c++
m_compilerInst.createDiagnostics(nullptr, false);
m_compilerInst.getTargetOpts().Triple = llvm::sys::getDefaultTargetTriple();
clang::TargetInfo* pTargetInfo = clang::TargetInfo::CreateTargetInfo(m_compilerInst.getDiagnostics(), m_compilerInst.getInvocation().TargetOpts);
m_compilerInst.setTarget(pTargetInfo);
m_compilerInst.createFileManager();
m_compilerInst.createSourceManager(m_compilerInst.getFileManager());
m_compilerInst.createPreprocessor(clang::TU_Complete);
m_compilerInst.getDiagnosticClient().BeginSourceFile(m_compilerInst.getLangOpts(), &m_compilerInst.getPreprocessor());
```
llvm: 16.0.3
OS: Darwin Kernel Version 22.4.0
Compiler: clang version 14.0.3
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzsWtty46jWfhrlhmoXAh0vcuHYnZnUdE-6ksxf9V-5EFqSmcigApzDPP0u0MHnJDvb3Td7u1SxhRYfa7EOfKAwY0QtAS6D-CqI5xdsbZdKX_4NWr9-sWp1Uajy9fIZENOA4KUFLUByIWvEEJqWpQZj7pkUVvwDOqBTtDbwhVUW9JdWCaMkAq2VRs8BuUbGMv6IrGYcAjoN8DzA0yDB_dXd0nlA5xkN87j7-fXu7vbOAX9oMCUR6-QQfsEYhzghOIxzjJhFLR8aMcRZRSNUtH1LAlWVFxVGZrcFsk6tu6_TOVIVMuIfQJkD24O3Sw2sRA-9GQghFBCKEX4ZRsNISMQbJmtnO53elCCtqAToG1mprk2Y27W9rebMQkCygOSIK2ks2sg-sKKByTKg0yiMd8YKx7GyfH-sHxparTgYo3TX8p1xre6tG8jf12C_q3LdgFeGZKc6kyQgs9NmdPoGZLrRfbu7Vzyju5NEvOJhlFZFzN9VnLUtyNKrPxcauBVPsKvv3sQ6XXY03u_rdA3IFX6pIhSQrHjkS-CPi0orad2AepVE_nmIcZIWRcydcQHJrtaiKW9KF4g04XlRUE5YChTzKAdO4iIjRZxECSSMEuw__ZePwfFTYuxU2J4T2s9JFhY0endO7qAWxoJ2ClkhvYGmCyCvePIRw8qCRj_fsKg3LC-Ave_s3dDLjC279sUi7H6YJdNQLlqrAzo7AXXbWqGkCejXvUCYC1ZLZazg5qushYTD6P7GZD30P3h4r9aaw3cmWQ1HMuN3YCXoe2CaLw-fdtn2TTmZ97Lqm1KP67aP5EKpZk_6QTNpGubU_EsK-4eQ5eD6mH7A93kK7BcEddz5voyzvNivUDO1akXjzDWWSd5XJa6BWdiLgo8ZHib4XcOrOMoL_PMNT_rSjKuQ-Wz-oeFHZ1HvbilsX_Db0dgJb1tf55MdsHQAAx7iY2Bb9ycg6a562ahefFy9DyBmO4h5j8ggBY84c0647n3g3L2579c51-Cd1COmu4sbHhGznH8OcXcaw2G9xHnUrc0rJiTaiZe-Y7jngdCvWFkWxUVFIteUBXS2lo9SPUu08ontq00_zd3fPcIgDGoUZxZKFEYRKl4tGCSkESU4ohHhPPniGpGGWiiJgvhqG8EF2WzTQOKtqGPNgFy8bogJWoLe0K4NO6FhVsTcz-mzZu2iVUa8LFawYo2opU8V5mtIIwqfegttJ8wwuVDmZVG-SrYSfFK-NqIY8gt8r4jG_EhVqTBLGY95lBecsoJncRhmYZFUOSkozt5OruIwucLOGWkCLMycFaoFzazSSMJzQLK19Ay3RI2StSuc4yriDVw8sWZhh6pBs8HSgFwF5IoV4phpYcrC7IhpLIQkYVmUlSWNaMwwhqjiZV5UcQlJ_oZp9FjdIAOlYynzIdo0T6uBxDgnTztPD8tlfwvHrN5ryNHY94qZjlFmyREO4kavkmx39Kv1qv1h9Qhxs2qbgM5Oq0dmPqLXze6vkGTrxqVKt55apu2f8HzfsKJP4hHBK0jpMTLhNAzj6Fdo-NYEb6CnXeLsa--2NEeWw4iRNPXze0hvWib0jtb3VgtZf2ftje2CfJf2HFLfjvR4zkC_oiNA7wHsWHb-We0n1urXBazaxu8MZ-NEyHXTtFYvrLcj21f_DqqdhN6IO0KVDEmdZh-gQJCmRzL65zAB5_OYZyc3hH6TN-7LThneGUc-ZFzMf4Fx6cjty-j9Hej_uP1_yu0p_4jv0zL6BRQ3-2_l9vk5uf1Ic89H7jc892zsPiRnp_f07PQ--jy9jz9D7-__-v59evf_Hz6pPHGk9_lDwl6NJSvVc7-dYFqtZYnsElCxruvX4Wx0swvwx5gpJpgnmCS4I7H_1nUMKD0XUHYuoPxcQMwDYTxcEarS_to00r3GraPtr9tgxQgWBvFVlQbxfOz45tVrto3FOws_1P0tnPJMOHAmnOo8OBR_Hmcrp1ADNcjS1QQlAZmtJ65oggFpDcoQa9tGcL94dbnoqsWYdX2B6Fke2nzweDL-g2krWNOMOTsI4xBh4kIMRwjHCCcIj7X0d2AtaqCySEP5j5Jb6JtovtYAJVo60e5oYUuo7IXu_Yuao0hVOAB1QitRHhmN7AppUS8PoCq6K-TLI9Jg13qjUxXvCq0N9IKGq9ZjVePq9FujCtYcquNw8j0hIYVFSpddee6FhoXgh6_R3QHK2myLbIILzZS0TEjQSD2Brhr1vNGaD0JTrdkr4ko9ij1fIzYK3UirGVLF38D3Z6koRqR7JpGQFrRkjbcbhkffnKO6U5994_no9zvvg0MpXpx48za9ur17uPnzt733dKi7d4sKVyWgwzd5_dlJP_Bqwbf436SjfVv0PCBZv29zzLdijQGfLCf612AfmK7B3ra2JyyTBy3axmky39qrmlczbqHmULF103fspPvXI-Mwbq62yKeX7PfAqN3c-kGOC3Y8xZu33T07NGDXes9qZ0fsvJFPqqshg51bhp-eITPMUECydluT0106p1yLZrPjyd6X39sjHTH0EPFd0Dc2BH8t3E6iAftegGzmd9YIGCjj5ApqITulnWJHNe43hVt-CUhyKLan5Z5l-7nS_e1DE4XJBE_62nd771rmTD8Lif4ALaFB_wfauHWDkEk06ReEYQvlE9ZNCXrqpcLIoV2Ul7TMac4u4DJMMholbt27WF7mnFISkyoOCWQ4JGWakTBOwhhKEuMyuhCXBBOKY5yGNKIRnmSUVoSUFa8qqMIyDyIMKyaaidN_onR9IYxZw2VC4pxcNKyAxvj_HiBEwjPyDwNCgnh-oS9dny_FujZBhBthrNmgWGEbuPwQV35egkScNY2Q9Wc2lhdr3VwurW19RSDXAbmuhV2uiwlXq4Bce890X19arVwZDsi1t8QE5Npb-q8AAAD__-s4ufo">