bugPSPP - Bugs: bug #61283, SIGABRT in pspp at...

 
 

bug #61283: SIGABRT in pspp at src/libpspp/u8-line.c:139

Submitter:  Irfan Ariq <irfanariq>
Submitted:  Mon 04 Oct 2021 03:39:49 PM UTC
   
 
Category:  Output Driver Severity:  5 - Average
Status:  Fixed Assigned to:  None
Open/Closed:  Closed Release:  None
Effort:  0.00
* Mandatory Fields

Add a New Comment Rich Markup
   

Wed 06 Oct 2021 12:38:38 AM UTC, comment #1: 

Thank you for the report. I was able to reproduce this with PSPP 1.4.1, but not with the head of the current main branch, so I think that it has already been fixed.

Ben Pfaff <blp>
Group administrator
Mon 04 Oct 2021 03:39:49 PM UTC, original submission:  

Hello,

We are currently working on fuzz testing feature, and we found a *SIGABRT* on `pspp`.

The stack traces are as follow:
```
Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff586d921 in __GI_abort () at abort.c:79
#2  0x00007ffff585d48a in _assert_fail_base (fmt=0x7ffff59e4750 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=assertion@entry=0x7ffff68b8a60 "x1 >= x0", file=file@entry=0x7ffff68b8a20 "src/libpspp/u8-line.c", line=line@entry=139, function=function@entry=0x7ffff68b8b40 <__PRETTY_FUNCTION_.4132> "u8_line_reserve") at assert.c:92
#3  0x00007ffff585d502 in _GI___assert_fail (assertion=0x7ffff68b8a60 "x1 >= x0", file=0x7ffff68b8a20 "src/libpspp/u8-line.c", line=139, function=0x7ffff68b8b40 <__PRETTY_FUNCTION_.4132> "u8_line_reserve") at assert.c:101
#4  0x00007ffff67c62c9 in u8_line_reserve (line=0x61b000002280, x0=1, x1=0, n=2) at src/libpspp/u8-line.c:139
#5  0x00007ffff6be370b in ascii_reserve (a=0x611000000540, y=48, x0=1, x1=0, n=2) at src/output/ascii.c:658
#6  0x00007ffff6be3eab in text_draw (a=0x611000000540, halign=TABLE_HALIGN_MIXED, options=192, bold=false, underline=false, bb=0x7fffffffd0c0, clip=0x7fffffffd100, y=48, string=0x61900002f1f3 "รถ\t\t", n=2, width=18446744073709551615) at src/output/ascii.c:745
#7  0x00007ffff6be53c6 in ascii_layout_cell (a=0x611000000540, cell=0x7fffffffd240, bb=0x7fffffffd0c0, clip=0x7fffffffd100, widthp=0x7fffffffcfa0, heightp=0x7fffffffcfe0) at src/output/ascii.c:908
#8  0x00007ffff6be3473 in ascii_draw_cell (a_=0x611000000540, cell=0x7fffffffd240, color_idx=1, bb=0x7fffffffd0c0, spill=0x7fffffffd140, clip=0x7fffffffd100) at src/output/ascii.c:642
#9  0x00007ffff6c1794b in render_cell (page=0x60d000031ae0, ofs=0x7fffffffd3d0, cell=0x7fffffffd240) at src/output/render.c:1127
```
Here is the full stack trace : [link]()

*Step to reproduce*

We configured `pspp` using `CFLAGS="-g -O0 -fsanitize=address" CXXFLAGS="-g -O0 -fsanitize=address" ./configure --prefix=$(pwd)/ --without-cairo --without-perl-module` and build it using `make -j10`, and run it with:

```
./pspp <attached file> -O device=listing -o -a -e format=odt -O -o
```
Attachment: [input file]()

*Environment*
- OS: Ubuntu 18.04.5 LTS
- GCC version: gcc 7.5.0
- pspp version: [pspp 1.4.1](http://mirror.yongbok.net/gnu/pspp/pspp-1.4.1.tar.gz)

Thank you.

Irfan Ariq <irfanariq>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #52025:  full_stacktrace_poc_10.zip added by irfanariq (2KiB - application/x-zip-compressed)
file #52026:  input_pspp_poc_10.zip added by irfanariq (1KiB - application/x-zip-compressed)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by blp (Posted a comment)
  • -email is unavailable- added by irfanariq (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 5 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-10-06 blp CategoryNone Output Driver
        StatusNone Fixed
        Open/ClosedOpen Closed
    2021-10-04 irfanariq Attached File- Added full_stacktrace_poc_10.zip, #52025
        Attached File- Added input_pspp_poc_10.zip, #52026

    Back to the top

    Powered by Savane 3.13-4b48.
    Corresponding source code