[Mono-bugs] [Bug 558594] New: [verifier] SIGSEGV in mono_method_verify (invalid instruction pointer) on a bad assembly

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=558594

http://bugzilla.novell.com/show_bug.cgi?id=558594#c0


           Summary: [verifier] SIGSEGV in mono_method_verify (invalid
                    instruction pointer) on a bad assembly
    Classification: Mono
           Product: Mono: Runtime
           Version: 2.6.x
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: misc
        AssignedTo: rkumpera at novell.com
        ReportedBy: spouliot at novell.com
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---
           Blocker: ---


Created an attachment (id=329566)
 --> (http://bugzilla.novell.com/attachment.cgi?id=329566)
assembly to reproduce crash

gdb --args pedump --verify all System.33426.dll

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fe066cf7710 (LWP 16797)]
0x00000000004c9f33 in mono_method_verify (method=0x939170, level=135) at
verify.c:5095
5095            switch (*ip) {
(gdb) p *ip
Cannot access memory at address 0x7fde66c55fc9
(gdb) p ip
$1 = (const unsigned char *) 0x7fde66c55fc9 <Address 0x7fde66c55fc9 out of
bounds>
(gdb) p ctx
$2 = {max_args = 2, max_stack = 6, verifiable = 1, valid = 1, level = 135,
code_size = 697, code = 0x93e5a0, eval = {stack = 0x937930, size = 0, flags =
4}, params = 0x92d7d0, list = 0x0, funptrs = 0x0, 
  exception_types = 0x0, num_locals = 8, locals = 0x929f40, target = 530,
ip_offset = 289, signature = 0x939150, header = 0x939548, generic_context =
0x0, image = 0x8aba80, method = 0x939170, 
  has_this_store = 0, super_ctor_called = 0, prefix_set = 0, has_flags = 0,
constrained_type = 0x0}
(gdb) p *ctx->header
$3 = {code_size = 697, code = 0x7fe066c55ea8 "\026\n\002{�\001", max_stack = 6,
num_clauses = 0, init_locals = 1, num_locals = 8, clauses = 0x0, locals =
0x939568}
(gdb) p method->name
$4 = 0x7fe066c67f7c "ParseCharacterClass"
(gdb) p method->klass->name
$5 = 0x7fe066c65489 "Parser"
(gdb) p method->klass->name_space
$6 = 0x7fe066c6539b "System.Text.RegularExpressions.Syntax"


Something mess with 'ip' :|

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.