./troff: end of input in escape name ================================================================= ==9587==ERROR: AddressSanitizer: global-buffer-overflow on address 0x0000006bc201 at pc 0x00000061ece3 bp 0x7ffed8c0a290 sp 0x7ffed8c0a288 READ of size 1 at 0x0000006bc201 thread T0 #0 0x61ece2 in make_glyph_node(charinfo*, environment*, int) /f/groff/groff-1.22.3/src/roff/troff/node.cpp:4978:29 #1 0x61f7a9 in node::add_char(charinfo*, environment*, hunits*, int*, node**) /f/groff/groff-1.22.3/src/roff/troff/node.cpp:5080:16 #2 0x4ff22b in environment::add_char(charinfo*) /f/groff/groff-1.22.3/src/roff/troff/env.cpp:304:14 #3 0x577b25 in token::process() /f/groff/groff-1.22.3/src/roff/troff/input.cpp:7309:5 #4 0x56c56d in process_input_stack() /f/groff/groff-1.22.3/src/roff/troff/input.cpp:3040:2 #5 0x5b96e4 in process_input_file(char const*) /f/groff/groff-1.22.3/src/roff/troff/input.cpp:7804:3 #6 0x5b0a7b in main /f/groff/groff-1.22.3/src/roff/troff/input.cpp:8112:5 #7 0x7f0bd587df9f in __libc_start_main /var/tmp/portage/sys-libs/glibc-2.20-r2/work/glibc-2.20/csu/libc-start.c:289 #8 0x41acc6 in _start (/mnt/ram/troff/troff+0x41acc6) 0x0000006bc201 is located 63 bytes to the left of global variable 'table_sizes' defined in 'symbol.cpp:43:27' (0x6bc240) of size 68 0x0000006bc201 is located 0 bytes to the right of global variable '' defined in 'symbol.cpp:33:27' (0x6bc200) of size 1 '' is ascii string '' SUMMARY: AddressSanitizer: global-buffer-overflow /f/groff/groff-1.22.3/src/roff/troff/node.cpp:4978:29 in make_glyph_node(charinfo*, environment*, int) Shadow bytes around the buggy address: 0x0000800cf7f0: 02 f9 f9 f9 f9 f9 f9 f9 02 f9 f9 f9 f9 f9 f9 f9 0x0000800cf800: 06 f9 f9 f9 f9 f9 f9 f9 07 f9 f9 f9 f9 f9 f9 f9 0x0000800cf810: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0000800cf820: 00 00 00 00 00 03 f9 f9 f9 f9 f9 f9 03 f9 f9 f9 0x0000800cf830: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0000800cf840:[01]f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 0x0000800cf850: 04 f9 f9 f9 f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 0x0000800cf860: 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 00 00 00 00 0x0000800cf870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0000800cf880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0000800cf890: 00 00 00 00 00 00 00 00 00 00 00 00 00 05 f9 f9 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==9587==ABORTING