[Mono-bugs] [Bug 651682] [verifier] SIGABRT in mono_metadata_decode_row

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=651682

https://bugzilla.novell.com/show_bug.cgi?id=651682#c6


Sebastien Pouliot <spouliot at novell.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #399367|0                           |1
        is obsolete|                            |

--- Comment #6 from Sebastien Pouliot <spouliot at novell.com> 2010-11-17 15:27:31 UTC ---
Created an attachment (id=400825)
 --> (http://bugzilla.novell.com/attachment.cgi?id=400825)
assembly to reproduce abort (opensuse 11.3, x86)

MONO_PATH=./bin gdb --args pedump --verify all
bin/System.Windows.Browser.sigabrt.8095.dll


* Assertion at metadata.c:967, condition `idx >= 0' not met


Program received signal SIGABRT, Aborted.
0xffffe424 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe424 in __kernel_vsyscall ()
#1  0xb7e2e7ff in raise () from /lib/libc.so.6
#2  0xb7e30140 in abort () from /lib/libc.so.6
#3  0x0819a4f2 in monoeg_g_logv (log_domain=0x0, log_level=G_LOG_LEVEL_ERROR,
format=0x81ad6b0 "* Assertion at %s:%d, condition `%s' not met\n", 
    args=0xbfffe884 "\242\326\032\b\307\003") at goutput.c:134
#4  0x0819a571 in monoeg_assertion_message (format=0x81ad6b0 "* Assertion at
%s:%d, condition `%s' not met\n") at goutput.c:154
#5  0x0809cbe5 in mono_metadata_decode_row (t=0x828dd00, idx=-1,
res=0xbfffe8f8, res_size=1) at metadata.c:967
#6  0x080a3da0 in mono_type_create_from_typespec (image=0x828db58,
type_spec=452984832) at metadata.c:5242
#7  0x08064934 in mono_type_retrieve_from_typespec (image=0x828db58,
type_spec=452984832, context=0x82a7264, did_inflate=0xbfffe984,
error=0xbfffe988)
    at class.c:5866
#8  0x0806668a in mono_type_get_full (image=0x828db58, type_token=452984832,
context=0x82a7264) at class.c:6694
#9  0x081070a3 in verifier_load_type (ctx=0xbfffeb2c, token=452984832,
opcode=0x81bbf3b "unbox.any") at verify.c:953
#10 0x081087ab in get_boxable_mono_type (ctx=0xbfffeb2c, token=452984832,
opcode=0x81bbf3b "unbox.any") at verify.c:1594
#11 0x0810eef2 in do_unbox_any (ctx=0xbfffeb2c, klass_token=452984832) at
verify.c:3304
#12 0x0811954e in mono_method_verify (method=0x82a724c, level=135) at
verify.c:5385
#13 0x080508a2 in dump_verify_info (image=0x828db58, flags=135) at pedump.c:369
#14 0x0805167c in main (argc=4, argv=0xbffff034) at pedump.c:735

-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.