bugGNU Octave - Bugs: bug #53500, crash with subplot in a loop

 
 

bug #53500: crash with subplot in a loop

Submitter:  Ceral Paquet <octavebugs>
Submitted:  Wed 28 Mar 2018 02:36:29 PM UTC
   
 
Category:  None Severity:  3 - Normal
Priority:  5 - Normal Item Group:  None
Status:  Fixed Assigned to:  None
Originator Name:  Open/Closed:  * Closed
Release:  * 4.2.1 Operating System:  * GNU/Linux
Fixed Release:  None Planned Release:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 29 Mar 2018 04:22:01 AM UTC, comment #7: 

I verified the fix using the original test code.  This is likely to clear up a lot of flakiness we have seen in the graphics code.

Rik <rik5>
Group administrator
Wed 28 Mar 2018 09:51:05 PM UTC, comment #6: 

I was running --disable-gui

Dmitri.
--

Dmitri A. Sergatskov <dasergatskov>
Wed 28 Mar 2018 09:47:47 PM UTC, comment #5: 

It happens for me, but with the following changeset I no longer see the crash:

http://hg.savannah.gnu.org/hgweb/octave/rev/b6aea95a7bf9

This changeset is for the dev version, but I think it would apply to 4.2.x as well.

Dmitri, were you running with the GUI?  I'm pretty sure this problem is specific to Qt graphics.  It may also show up less frequently if you are running Octave without the GUI.

John W. Eaton <jwe>
Group administrator
Wed 28 Mar 2018 06:02:22 PM UTC, comment #4: 

I can reproduce this with 4.2.2 on Fedora 27.
It works fine with a recent 4.3.0+ (pre 4.4.0) on the same computer.

Dmitri.
--


Dmitri A. Sergatskov <dasergatskov>
Wed 28 Mar 2018 04:09:54 PM UTC, comment #3: 

I could reproduce it in debug mode and dbg returns this:


==13476== ERROR: AddressSanitizer: heap-use-after-free on address 0x600c0068c4e0 at pc 0x7ffff49ddc09 bp 0x7fffffffb900 sp 0x7fffffffb8f8
READ of size 8 at 0x600c0068c4e0 thread T0
    #0 0x7ffff49ddc08 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3c9c08)
    #1 0x7ffff49f30ad (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3df0ad)
    #2 0x7ffff499ed99 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x38ad99)
    #3 0x7ffff0c5be25 (/usr/lib64/libQt5Core.so.5.6.2+0x29ce25)
    #4 0x7ffff193128b (/usr/lib64/libQt5Widgets.so.5.6.2+0x16428b)
    #5 0x7ffff19358e9 (/usr/lib64/libQt5Widgets.so.5.6.2+0x1688e9)
    #6 0x7ffff0c30be4 (/usr/lib64/libQt5Core.so.5.6.2+0x271be4)
    #7 0x7ffff0c329c9 (/usr/lib64/libQt5Core.so.5.6.2+0x2739c9)
    #8 0x7ffff0c81b02 (/usr/lib64/libQt5Core.so.5.6.2+0x2c2b02)
    #9 0x7fffe59a3133 (/usr/lib64/libglib-2.0.so.0.4800.2+0x4c133)
    #10 0x7fffe59a3387 (/usr/lib64/libglib-2.0.so.0.4800.2+0x4c387)
    #11 0x7fffe59a342b (/usr/lib64/libglib-2.0.so.0.4800.2+0x4c42b)
    #12 0x7ffff0c8118b (/usr/lib64/libQt5Core.so.5.6.2+0x2c218b)
    #13 0x7ffff0c2ebfa (/usr/lib64/libQt5Core.so.5.6.2+0x26fbfa)
    #14 0x7ffff0c36ae5 (/usr/lib64/libQt5Core.so.5.6.2+0x277ae5)
    #15 0x7ffff48b2dbf (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x29edbf)
    #16 0x401d57 (/opt/octave/debug/src/.libs/octave-gui+0x401d57)
    #17 0x7fffe659c724 (/lib64/libc-2.22.so+0x20724)
    #18 0x401868 (/opt/octave/debug/src/.libs/octave-gui+0x401868)
0x600c0068c4e0 is located 0 bytes inside of 64-byte region [0x600c0068c4e0,0x600c0068c520)
freed by thread T0 here:
    #0 0x7ffff4e5df8a (/usr/lib64/libasan.so.0.0.0+0x11f8a)
    #1 0x7ffff49e65b7 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3d25b7)
    #2 0x7ffff0c596c4 (/usr/lib64/libQt5Core.so.5.6.2+0x29a6c4)
previously allocated by thread T0 here:
    #0 0x7ffff4e5ddca (/usr/lib64/libasan.so.0.0.0+0x11dca)
    #1 0x7ffff49dc4ee (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3c84ee)
    #2 0x7ffff49dac2f (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3c6c2f)
    #3 0x7ffff49da8d6 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3c68d6)
    #4 0x7ffff49f3e60 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x3dfe60)
    #5 0x7ffff499f157 (/opt/octave/debug/libgui/.libs/liboctgui.so.2.0.0+0x38b157)
    #6 0x7ffff0c5be25 (/usr/lib64/libQt5Core.so.5.6.2+0x29ce25)


Guillaume <gyom>
Wed 28 Mar 2018 03:40:59 PM UTC, comment #2: 

Octave goes shut down by following comment on terminal
"octave exited with signal 11".

Dildar Sk <hodor123456>
Wed 28 Mar 2018 03:31:11 PM UTC, comment #1: 

Yes, I can reproduce this problem on my system.

Dildar Sk <hodor123456>
Wed 28 Mar 2018 02:36:29 PM UTC, original submission:  

The following line crashes Octave after a few seconds.

for j=1:1000;figure;subplot(1,2,1);close;end


Ceral Paquet <octavebugs>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rik5 (Posted a comment)
  • -email is unavailable- added by jwe (Posted a comment)
  • -email is unavailable- added by dasergatskov (Posted a comment)
  • -email is unavailable- added by gyom (Posted a comment)
  • -email is unavailable- added by hodor123456 (Posted a comment)
  • -email is unavailable- added by octavebugs (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only group members can vote.

     

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-03-29 rik5 StatusReady For Test Fixed
        Open/ClosedOpen Closed
    2018-03-28 jwe StatusNone Ready For Test

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code