[Mono-bugs] [Bug 560359] New: [verifier] abort in mono_metadata_decode_row on bad assembly

bugzilla_noreply at novell.com bugzilla_noreply at novell.com
Thu Dec 3 10:14:05 EST 2009


http://bugzilla.novell.com/show_bug.cgi?id=560359

http://bugzilla.novell.com/show_bug.cgi?id=560359#c0


           Summary: [verifier] abort in mono_metadata_decode_row on bad
                    assembly
    Classification: Mono
           Product: Mono: Runtime
           Version: 2.6.x
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: verifier
        AssignedTo: rkumpera at novell.com
        ReportedBy: spouliot at novell.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---
           Blocker: ---


Created an attachment (id=330783)
 --> (http://bugzilla.novell.com/attachment.cgi?id=330783)
assembly to reproduce abort

note: following Marek's suggestion this is System.Core.dll in 4.0 profile to
test more cases of generic. Make sure MONO_PATH points to your 4.0 setup.

MONO_PATH=. gdb --args pedump --verify all System.Core.sigsegv.90690.dll

** (process:16998): CRITICAL **: mono_metadata_string_heap: assertion `index <
meta->heap_strings.size' failed
**
** ERROR:(metadata.c:961):mono_metadata_decode_row: assertion failed: (idx <
t->rows)
[New Thread 0x7fd98488a710 (LWP 16998)]

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7fd98488a710 (LWP 16998)]
0x00007fd9833f75c5 in raise () from /lib64/libc.so.6
(gdb) bt
#0  0x00007fd9833f75c5 in raise () from /lib64/libc.so.6
#1  0x00007fd9833f8bb3 in abort () from /lib64/libc.so.6
#2  0x00007fd9842252c7 in g_assertion_message () from
/usr/lib64/libglib-2.0.so.0
#3  0x00007fd984225762 in g_assertion_message_expr () from
/usr/lib64/libglib-2.0.so.0
#4  0x000000000044ce4c in mono_metadata_decode_row (t=0x831af0, idx=3243,
res=0x7fff8c8a8c90, res_size=9) at metadata.c:961
#5  0x0000000000410272 in mono_assembly_get_assemblyref (image=0x831800,
index=16998, aname=0x7fff8c8a8d40) at assembly.c:787
#6  0x0000000000412e42 in mono_assembly_load_reference (image=0x831800,
index=3243) at assembly.c:831
#7  0x0000000000413a52 in mono_class_from_typeref (image=0x831800,
type_token=16777216) at class.c:160
#8  0x0000000000422513 in mono_class_get_full (image=0x831800,
type_token=16777216, context=0x0) at class.c:5860
#9  0x000000000041f1d9 in mono_class_create_from_typedef (image=0x831800,
type_token=33554432) at class.c:4596
#10 0x00000000004224f8 in mono_class_get_full (image=0x831800,
type_token=33554432, context=0x0) at class.c:5857
#11 0x00000000004227e6 in mono_class_get (image=0x831800, type_token=33554432)
at class.c:5943
#12 0x0000000000450075 in do_mono_metadata_parse_type (type=0x7fff8c8a9330,
m=0x831800, container=0x0, ptr=0x7fd98481c674 "\006 \001\001\022\202", 
    rptr=0x7fff8c8a9300) at metadata.c:2757
#13 0x000000000044df80 in mono_metadata_parse_type_full (m=0x831800,
container=0x0, mode=MONO_PARSE_FIELD, opt_attrs=33, ptr=0x7fd98481c671
"\022\200", 
    rptr=0x7fff8c8a93b0) at metadata.c:1618
#14 0x000000000041641d in mono_class_setup_fields (class=0x854e70) at
class.c:1279
#15 0x000000000041db8b in mono_class_init (class=0x854e70) at class.c:4040
#16 0x000000000040ecc8 in main (argc=<value optimized out>, argv=<value
optimized out>) at pedump.c:475

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the mono-bugs mailing list