[LLVMbugs] [Bug 22547] New: Bad debug info when inlining

[bugzilla-daemon at llvm.org]

http://llvm.org/bugs/show_bug.cgi?id=22547

            Bug ID: 22547
           Summary: Bad debug info when inlining
           Product: clang
           Version: trunk
          Hardware: PC
                OS: All
            Status: NEW
          Severity: normal
          Priority: P
         Component: C++11
          Assignee: unassignedclangbugs at nondot.org
          Reporter: nicolasweber at gmx.de
                CC: dgregor at apple.com, llvmbugs at cs.uiuc.edu
    Classification: Unclassified

clang/asan gave us this stack for something going wrong:

==2120==ERROR: AddressSanitizer: heap-use-after-free on address 0x1701b5e4 at
pc 0x0b77244f bp 0xdeadbeef sp 0x0028ae3c
READ of size 4 at 0x1701b5e4 thread T0
    #0 0xb77244e in content::FrameAccessibility::GetParent
C:\b\build\slave\CrWinAsan\build\src\base\memory\scoped_ptr.h:251
    #1 0xb214bbc in content::RenderFrameHostImpl::AccessibilityGetParentFrame
C:\b\build\slave\CrWinAsan\build\src\content\browser\frame_host\render_frame_host_impl.cc:530
    #2 0xb1abc0e in
content::BrowserAccessibilityManager::GetDelegateFromRootManager
C:\b\build\slave\CrWinAsan\build\src\content\browser\accessibility\browser_accessibility_manager.cc:461



Note how the top line points at scoped_ptr.h.  A different, cl.exe-based tool
(I think) gives the right location:



### BEGIN MEMORY TOOL REPORT (error hash=#AFC58CEC99C34439#)
UNADDRESSABLE ACCESS of freed memory: reading 0x02d9b69c-0x02d9b6a0 4 byte(s)
# 0 content.dll!content::FrameAccessibility::GetParent                        
[content\browser\frame_host\frame_accessibility.cc:163]
# 1 content.dll!content::RenderFrameHostImpl::AccessibilityGetParentFrame     
[content\browser\frame_host\render_frame_host_impl.cc:512]
# 2
content.dll!content::BrowserAccessibilityManager::GetDelegateFromRootManager
[content\browser\accessibility\browser_accessibility_manager.cc:443]



(never mind the shifting line numbers, they're at slighly different revisions.)


The code in question is
https://code.google.com/p/chromium/codesearch#chromium/src/content/browser/frame_host/frame_accessibility.cc&l=163
.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20150211/8b8cda7d/attachment.html>