Re: [zile-devel] CVS zile crashing on initialisation

[David A. Capello]

On jue, oct 21, 2004 at 09:42:50 +0100, Reuben Thomas wrote:
> David,
> 
> I can't find any problem here: having rebuilt from scratch from 
> up-to-date CVS, if I just start up and shut down zile, valgrind reports 
> no memory errors.
> 
> I wonder if there's some error condition (to do with the use of termcap) 
> that I'm not checking for, e.g. some capability not existing, but most 
> of them are checked, and the gdb backtrace you gave suggests something 
> weirder (in particular, the NULL argv).

It's strange, when gdb initializes, the argv contain a correct
pointer, but after the crash, all values are lost.

> Sorry I can't be more help just now. If you could get info from 
> valgrind, that might well be helpful (generally I use valgrind first, 
> and gdb if I need to look more closely at the events leading up to the 
> bug!).

Take a look to this:

==1281== Memcheck, a memory error detector for x86-linux.
==1281== Copyright (C) 2002-2004, and GNU GPL'd, by Julian Seward et al.
==1281== Using valgrind-2.2.0, a program supervision framework for x86-linux.
==1281== Copyright (C) 2000-2004, and GNU GPL'd, by Julian Seward et al.
==1281== Valgrind library directory: /usr/local/lib/valgrind
==1281== Command line
==1281==    ./zile
==1281== Startup, with flags:
==1281==    -v
==1281==    --tool=memcheck
==1281==    --leak-check=yes
==1281==    --show-reachable=yes
==1281== Contents of /proc/version:
==1281==   Linux version 2.4.19 (address@hidden) (gcc version 2.95.4 20011002 
(Debian prerelease)) #2 mié sep 1 15:17:16 ART 2004
==1281== Reading syms from /home/dacap/src/zile/src/zile (0x8048000)
==1281== Reading syms from /lib/ld-2.3.2.so (0x1B8E4000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Reading syms from /usr/local/lib/valgrind/stage2 (0xB0000000)
==1281== Reading syms from /lib/ld-2.3.2.so (0xB1000000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Reading syms from /lib/libdl-2.3.2.so (0xB1027000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Reading syms from /lib/libc-2.3.2.so (0xB102A000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Reading syms from /usr/local/lib/valgrind/vgskin_memcheck.so 
(0xB125D000)
==1281== Reading suppressions file: /usr/local/lib/valgrind/default.supp
==1281== REDIRECT soname:libc.so.6(__GI___errno_location) to 
soname:libpthread.so.0(__errno_location)
==1281== REDIRECT soname:libc.so.6(__errno_location) to 
soname:libpthread.so.0(__errno_location)
==1281== REDIRECT soname:libc.so.6(__GI___h_errno_location) to 
soname:libpthread.so.0(__h_errno_location)
==1281== REDIRECT soname:libc.so.6(__h_errno_location) to 
soname:libpthread.so.0(__h_errno_location)
==1281== REDIRECT soname:libc.so.6(__GI___res_state) to 
soname:libpthread.so.0(__res_state)
==1281== REDIRECT soname:libc.so.6(__res_state) to 
soname:libpthread.so.0(__res_state)
==1281== REDIRECT soname:libc.so.6(stpcpy) to *vgpreload_memcheck.so*(stpcpy)
==1281== REDIRECT soname:libc.so.6(strnlen) to *vgpreload_memcheck.so*(strnlen)
==1281== REDIRECT soname:ld-linux.so.2(stpcpy) to 
*vgpreload_memcheck.so*(stpcpy)
==1281== REDIRECT soname:ld-linux.so.2(strchr) to 
*vgpreload_memcheck.so*(strchr)
==1281== 
==1281== Reading syms from /usr/local/lib/valgrind/vg_inject.so (0x1B8FE000)
==1281== Reading syms from /usr/local/lib/valgrind/vgpreload_memcheck.so 
(0x1B901000)
==1281== Reading syms from /lib/libncurses.so.5.4 (0x1B909000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Reading syms from /lib/libc-2.3.2.so (0x1B95B000)
==1281==    object doesn't have a symbol table
==1281==    object doesn't have any debug info
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED530: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E6098: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED585: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E6098: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED3DA: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED3E8: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED585: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== TRANSLATE: 0x1B9CBE60 redirected to 0x1B904D20
==1281== TRANSLATE: 0x1B9CC650 redirected to 0x1B9057BC
==1281== TRANSLATE: 0x1B9D0C40 redirected to 0x1B9046C4
==1281== TRANSLATE: 0x1B9CC020 redirected to 0x1B9052DC
==1281== TRANSLATE: 0x1B9CC0E0 redirected to 0x1B905880
==1281== 
==1281== Invalid read of size 1
==1281==    at 0x1B9046F0: strlen (mac_replace_strmem.c:189)
==1281==    by 0x805A014: tgetstr_note_len (term_termcap.c:267)
==1281==    by 0x805A186: term_init (term_termcap.c:311)
==1281==    by 0x8054AEF: main (main.c:368)
==1281==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
Zile crashed.  Please send a bug report to <address@hidden>.
Trying to save modified buffers (if any)...
==1281== 
==1281== ERROR SUMMARY: 14 errors from 6 contexts (suppressed: 0 from 0)
==1281== 
==1281== 1 errors in context 1 of 6:
==1281== Invalid read of size 1
==1281==    at 0x1B9046F0: strlen (mac_replace_strmem.c:189)
==1281==    by 0x805A014: tgetstr_note_len (term_termcap.c:267)
==1281==    by 0x805A186: term_init (term_termcap.c:311)
==1281==    by 0x8054AEF: main (main.c:368)
==1281==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==1281== 
==1281== 1 errors in context 2 of 6:
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED585: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== 1 errors in context 3 of 6:
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED3E8: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== 1 errors in context 4 of 6:
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED3DA: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E60DF: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== 5 errors in context 5 of 6:
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED585: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E6098: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== 
==1281== 5 errors in context 6 of 6:
==1281== Conditional jump or move depends on uninitialised value(s)
==1281==    at 0x1B8ED530: _dl_relocate_object (in /lib/ld-2.3.2.so)
==1281==    by 0x1B8E6098: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8F30FC: (within /lib/ld-2.3.2.so)
==1281==    by 0x1B8E4F3A: (within /lib/ld-2.3.2.so)
==1281== IN SUMMARY: 14 errors from 6 contexts (suppressed: 0 from 0)
==1281== 
==1281== malloc/free: in use at exit: 20940 bytes in 17 blocks.
==1281== malloc/free: 23 allocs, 6 frees, 23052 bytes allocated.
==1281== 
==1281== searching for pointers to 17 not-freed blocks.
==1281== checked 1781228 bytes.
==1281== 
==1281== 
==1281== 8 bytes in 1 blocks are definitely lost in loss record 1 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x1B9D098F: strdup (in /lib/libc-2.3.2.so)
==1281==    by 0x1B9327CF: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B932D03: tgetent (in /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 14 bytes in 1 blocks are still reachable in loss record 2 of 13
==1281==    at 0x1B90596B: realloc (vg_replace_malloc.c:197)
==1281==    by 0x1B93097F: _nc_doalloc (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9338FE: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B933551: tparm (in /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 14 bytes in 2 blocks are still reachable in loss record 3 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x1B9D098F: strdup (in /lib/libc-2.3.2.so)
==1281==    by 0x1B932507: setupterm (in /lib/libncurses.so.5.4)
==1281==    by 0x1B93292E: tgetent (in /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 20 bytes in 1 blocks are still reachable in loss record 4 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x1B9371EF: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B937934: _nc_read_file_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9379F8: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 24 bytes in 1 blocks are still reachable in loss record 5 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x1B930BC5: _nc_home_terminfo (in /lib/libncurses.so.5.4)
==1281==    by 0x1B937BE8: _nc_read_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9320EE: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 40 bytes in 2 blocks are still reachable in loss record 6 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x805BFC4: xmalloc (xmalloc.c:20)
==1281==    by 0x805A991: alist_new (alist.c:60)
==1281==    by 0x8054911: main (main.c:316)
==1281== 
==1281== 
==1281== 44 bytes in 1 blocks are still reachable in loss record 7 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x1B93723B: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B937934: _nc_read_file_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9379F8: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 78 bytes in 1 blocks are still reachable in loss record 8 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x1B9372A2: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B937934: _nc_read_file_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9379F8: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 98 bytes in 1 blocks are still reachable in loss record 9 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x1B9309B7: _nc_doalloc (in /lib/libncurses.so.5.4)
==1281==    by 0x1B933505: _nc_tparm_analyze (in /lib/libncurses.so.5.4)
==1281==    by 0x1B933781: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 172 bytes in 1 blocks are still reachable in loss record 10 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x1B932437: setupterm (in /lib/libncurses.so.5.4)
==1281==    by 0x1B93292E: tgetent (in /lib/libncurses.so.5.4)
==1281==    by 0x8059EA7: get_tcap (term_termcap.c:233)
==1281== 
==1281== 
==1281== 724 bytes in 1 blocks are still reachable in loss record 11 of 13
==1281==    at 0x1B904DC5: malloc (vg_replace_malloc.c:131)
==1281==    by 0x1B937120: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B937934: _nc_read_file_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9379F8: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 1656 bytes in 1 blocks are still reachable in loss record 12 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x1B937319: (within /lib/libncurses.so.5.4)
==1281==    by 0x1B937934: _nc_read_file_entry (in /lib/libncurses.so.5.4)
==1281==    by 0x1B9379F8: (within /lib/libncurses.so.5.4)
==1281== 
==1281== 
==1281== 18048 bytes in 3 blocks are still reachable in loss record 13 of 13
==1281==    at 0x1B905861: calloc (vg_replace_malloc.c:176)
==1281==    by 0x8051250: zmalloc (glue.c:241)
==1281==    by 0x8059E87: get_tcap (term_termcap.c:224)
==1281==    by 0x805A0B0: term_init (term_termcap.c:283)
==1281== 
==1281== LEAK SUMMARY:
==1281==    definitely lost: 8 bytes in 1 blocks.
==1281==    possibly lost:   0 bytes in 0 blocks.
==1281==    still reachable: 20932 bytes in 16 blocks.
==1281==         suppressed: 0 bytes in 0 blocks.
--1281--     TT/TC: 0 tc sectors discarded.
--1281--            2951 tt_fast misses.
--1281-- translate: new     2939 (46594 -> 618900; ratio 132:10)
--1281--            discard 0 (0 -> 0; ratio 0:10).
--1281-- chainings: 1927 chainings, 0 unchainings.
--1281--  dispatch: 2085 jumps (bb entries); of them 9807 (470%) unchained.
--1281--            73/3123 major/minor sched events.
--1281-- reg-alloc: 508 t-req-spill, 114500+3548 orig+spill uis,
--1281--            15172 total-reg-rank
--1281--    sanity: 74 cheap, 3 expensive checks.
--1281--    ccalls: 10401 C calls, 55% saves+restores avoided (33910 bytes)
--1281--            13850 args, avg 0.86 setup instrs each (3640 bytes)
--1281--            0% clear the stack (31203 bytes)
--1281--            4465 retvals, 29% of reg-reg movs avoided (2560 bytes)

-- 
http://www.davidcapello.com.ar