From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=MAILING_LIST_MULTI, RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2 Received: from primenet.com.au (ns1.primenet.com.au [203.24.36.2]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id b421e80d for ; Wed, 18 Dec 2019 10:02:25 +0000 (UTC) Received: (qmail 8816 invoked by alias); 18 Dec 2019 10:02:18 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: List-Unsubscribe: X-Seq: 45082 Received: (qmail 21890 invoked by uid 1010); 18 Dec 2019 10:02:18 -0000 X-Qmail-Scanner-Diagnostics: from mailout2.w1.samsung.com by f.primenet.com.au (envelope-from , uid 7791) with qmail-scanner-2.11 (clamdscan: 0.102.1/25663. spamassassin: 3.4.2. Clear:RC:0(210.118.77.12):SA:0(-7.0/5.0):. Processed in 3.074546 secs); 18 Dec 2019 10:02:18 -0000 X-Envelope-From: p.stephenson@samsung.com X-Qmail-Scanner-Mime-Attachments: | X-Qmail-Scanner-Zip-Files: | Received-SPF: pass (ns1.primenet.com.au: SPF record at _spf.samsung.com designates 210.118.77.12 as permitted sender) DKIM-Filter: OpenDKIM Filter v2.11.0 mailout2.w1.samsung.com 20191218100139euoutp0204b96092ddae8a3342630166f96030a9~hburYfbR22776827768euoutp029 X-AuditID: cbfec7f4-0cbff7000001ed07-a5-5df9f9030ff9 Message-ID: <1576663298.4536.12.camel@samsung.com> Subject: Re: =?ISO-8859-1?Q?Re=A0=3A?= Re: =?ISO-8859-1?Q?Re=A0=3A?= [BUG] Crash due to malloc call in signal handler From: Peter Stephenson To: , Antoine C. Date: Wed, 18 Dec 2019 10:01:38 +0000 In-Reply-To: <1548982683.1013827769.1576607530234.JavaMail.root@zimbra62-e11.priv.proxad.net> X-Mailer: Evolution 3.18.5.2-0ubuntu3.2 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrBIsWRmVeSWpSXmKPExsWy7djP87rMP3/GGnw5ymqx6YK9xcHmh0wO TB796z6zeqw6+IEpgCmKyyYlNSezLLVI3y6BK2PP5k6mgktsFU/PfmRpYNzE2sXIySEhYCJx +M9m9i5GLg4hgRWMEj0HTkI5Xxglpk+exArhfGaUuHXlLRNMy9Vpv8DahQSWM0rMXugBVzRx zWwWCOcMo0Trk3WMEM4FRokFtw6CtfAKGEm82vgDzBYWKJfYf/gHM4jNJmAoMXXTbEYQW0TA QqJr+jWwGhYBVYkHfxexgNicArESl9uus0GcoSGx4eYxJoiZghInZz4Bq2EWkJdo3jqbGWSx hMB7NonlO7cxQjS4SHxZ2c8MYQtLvDq+hR3ClpH4v3M+E0RDO6PEmkmv2SGcHkaJTUfvQHVb S/TdvghkcwCt0JRYv0sfIuwoseZ9EzNIWEKAT+LGW0GII/gkJm2bDhXmlehoE4KoVpPY0bSV ESIsI/F0jcIERqVZSD6YheSDWQirFjAyr2IUTy0tzk1PLTbKSy3XK07MLS7NS9dLzs/dxAhM D6f/Hf+yg3HXn6RDjAIcjEo8vAYMP2OFWBPLiitzDzFKcDArifDe7gAK8aYkVlalFuXHF5Xm pBYfYpTmYFES5zVe9DJWSCA9sSQ1OzW1ILUIJsvEwSnVwGh4e12bfHRs7X0G51fT55sdNv5e uKTb7FH6y7by6hIJxja2TW33qpWfPIhcv+yvvLJccP3+Vds7GPMfJ70X0heovhZYMX/qdjaz i1tszsekZzzYditVs6b7/c1DH3IvyTca2oWVRf7Tb/4jkdZ7y/59QJYI/83gJfOnSLfd3s84 u+rRxLwnv5RYijMSDbWYi4oTARIaHjkLAwAA X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupikeLIzCtJLcpLzFFi42I5/e/4PV2mnz9jDZ7/1LfYdMHe4mDzQyYH Jo/+dZ9ZPVYd/MAUwBSlZ1OUX1qSqpCRX1xiqxRtaGGkZ2hpoWdkYqlnaGwea2VkqqRvZ5OS mpNZllqkb5egl7FncydTwSW2iqdnP7I0MG5i7WLk5JAQMJG4Ou0XkM3FISSwlFFi3Zk+qISM xKcrH9khbGGJP9e62CCKPjJK3HyzhREkISRwhlHi4wsfiMQFRonNJyaygCR4BYwkXm38ATZJ WKBcYv/hH8wgNpuAocTUTbPBmkUELCS6pl8Dq2ERUJV48HcRWC+nQKzE5bbrbBALNjJK3D0o AWIzC2hKtG7/DXWRhsSGm8eYIHYJSpyc+YQFokZeonnrbOYJjEKzkLTMQlI2C0nZAkbmVYwi qaXFuem5xYZ6xYm5xaV56XrJ+bmbGIHxsO3Yz807GC9tDD7EKMDBqMTDa8DwM1aINbGsuDL3 EKMEB7OSCO/tDqAQb0piZVVqUX58UWlOavEhRlOghyYyS4km5wNjNa8k3tDU0NzC0tDc2NzY zEJJnLdD4GCMkEB6YklqdmpqQWoRTB8TB6dUA2NhXJmL+N+Fk1t0fBMDv/d5bWSbua70yyOZ FaWSz/onyCtvVp8hGb61X1/GLzzm/YEvjEdZrhfOmrb0nELkdbOzBw+66jE8bOXedjqjQOOK qnzBvNedG0QUX2q0mi+0Ofj6dcUiT9WJXxlPXJq1hHm5r9zv3x/dmVpS/LJ2XJRdYPTNNHBB 2x0lluKMREMt5qLiRABWi+7NnQIAAA== X-CMS-MailID: 20191218100138eucas1p261938a9db0b2168d5004501f5ba9a014 X-Msg-Generator: CA Content-Type: text/plain; charset="utf-8" X-RootMTR: 20191217183216epcas1p1e81fb3dc675bab810e8d29ac0f53242c X-EPHeader: CA CMS-TYPE: 201P X-CMS-RootMailID: 20191217183216epcas1p1e81fb3dc675bab810e8d29ac0f53242c References: <1548982683.1013827769.1576607530234.JavaMail.root@zimbra62-e11.priv.proxad.net> On Tue, 2019-12-17 at 19:32 +0100, Antoine C. wrote: > Good news(!), I finally get another crash with a backtrace, despite  > Peter's last patch. This one, like the previous, is triggered by debug > code because of two simultaneous free() calls from main and signal  > contexts. Great, thanks. OK, the suspect here is the arithmetic code --- it looks like it's running unprotected against signals, despite the fact it can set variables.  Arithmetic is a quick operation, so hopefully we can block fairly high up the stack.  I should get a chance to look later (but I don't think this is rocket science from this point on so maybe someone will beat me to it). pws > #9  0x000055e115ce40f4 in zhandler (sig=17) at signals.c:648 ... > #23 0x000055e115c7cddf in execarith (state=0x7ffea5b39110, do_exec=0) at exec.c:5111