[Mono-bugs] [Bug 82293][Nor] New - issues in the mono debug code

[bugzilla-daemon at bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by lupus at ximian.com.

http://bugzilla.ximian.com/show_bug.cgi?id=82293

--- shadow/82293	2007-08-02 11:51:11.000000000 -0400
+++ shadow/82293.tmp.31773	2007-08-02 11:51:11.000000000 -0400
@@ -0,0 +1,84 @@
+Bug#: 82293
+Product: Mono: Runtime
+Version: 1.2
+OS: 
+OS Details: 
+Status: NEW   
+Resolution: 
+Severity: 
+Priority: Normal
+Component: debug
+AssignedTo: martin at ximian.com                            
+ReportedBy: lupus at ximian.com               
+QAContact: mono-bugs at ximian.com
+TargetMilestone: ---
+URL: 
+Cc: 
+Summary: issues in the mono debug code
+
+Running the wf-apps/AlbumSurfer app in the extras module with the --debug
+option results in invalid reads. They can show up as:
+
+#
+==14028== Invalid read of size 4
+#
+==14028==    at 0x80E350F: method_hash_hash (mono-debug.c:109)
+#
+==14028==    by 0x80E4D4E: mono_debug_add_method (mono-debug.c:585)
+#
+==14028==    by 0x806159F: mono_debug_close_method (debug-mini.c:266)
+#
+==14028==    by 0x81609AC: mini_method_compile (mini.c:10560)
+#
+==14028==    by 0x81618BD: mono_jit_compile_method (mini.c:10720)
+#
+==14028==    by 0x816164A: mono_jit_compile_method (mini.c:10708)
+#
+==14028==    by 0x8083519: mono_magic_trampoline (mini-trampolines.c:71)
+#
+==14028==    by 0x444103D: ???
+#
+==14028==    by 0x6A41C22: ???
+#
+==14028==    by 0x6A41BD8: ???
+#
+==14028==    by 0x6A415CA: ???
+#
+==14028==    by 0x6A40114: ???
+#
+==14028==  Address 0x5673574 is 4 bytes inside a block of size 16 free'd
+#
+==14028==    at 0x4020EA1: free (in
+/usr/lib/valgrind/x86-linux/vgpreload_memcheck.so)
+#
+==14028==    by 0x80EAABC: build_imt (object.c:1191)
+#
+==14028==    by 0x80EB1EE: mono_class_vtable (object.c:1453)
+#
+==14028==    by 0x8144A1E: dec_foreach (mini.c:8436)
+#
+==14028==    by 0x8144BD8: dec_foreach (mini.c:9136)
+#
+==14028==    by 0x81600C9: mini_method_compile (mini.c:9153)
+#
+==14028==    by 0x81618BD: mono_jit_compile_method (mini.c:10720)
+#
+==14028==    by 0x8083519: mono_magic_trampoline (mini-trampolines.c:71)
+
+or
+
+==10050== Invalid read of size 4
+==10050==    at 0x80DBA9F: method_hash_hash (mono-debug.c:109)
+==10050==    by 0x80DD2BE: mono_debug_add_method (mono-debug.c:585)
+==10050==    by 0x805C7DF: mono_debug_close_method (debug-mini.c:266)
+==10050==    by 0x815870C: mini_method_compile (mini.c:10560)
+==10050==    by 0x815961D: mono_jit_compile_method (mini.c:10720)
+==10050==    by 0x8159CD0: mono_jit_runtime_invoke (mini.c:11009)
+==10050==    by 0x8099EA4: mono_runtime_class_init (object.c:329)
+==10050==    by 0x8159844: mono_jit_compile_method (mini.c:10827)
+==10050==  Address 0x4C90CE4 is not stack'd, malloc'd or (recently) free'd
+==10050== 
+
+The code in mono-debug.c also doesn't have any support for domain
+unloading, so if it used after a single domain has been unloaded (or a
+single dynamic method is collected) random crashes can happen.