[avrdude-dev] [bug #48776] avrdude attempts to free() an invalid address

[Esot.Eric]

URL:
  <http://savannah.nongnu.org/bugs/?48776>

                 Summary: avrdude attempts to free() an invalid address
                 Project: AVR Downloader/UploaDEr
            Submitted by: esot_eric
            Submitted on: Sun 14 Aug 2016 01:40:35 AM GMT
                Category: None
                Severity: 3 - Normal
                Priority: 5 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: esot_eric
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

READING the flash into an ihex file: AVR-Dude crashes with:

*** Error in `avrdude': free(): invalid next size (normal): 0x09323798 ***
Aborted


* Linux x86-32bit
* ATmega8515
  * Tried later with ATtiny861, same problem. (also with eeprom-read)
* avr-dude v6.1
  * Tried later with v6.3, same problem.
* usb-tiny-isp v1.04 (this is the version that comes from adafruit)
  * Tried later with FT2232H-based programmer, NO PROBLEM.
  *  v1.07 has been tried with same problem at second link, below

The ihex file is written and appears to be correct.

VERY LITTLE info 'round the web about this error-message...

I think, mostly, due to the fact that the message isn't coming from avrdude,
but from glibc(?)... most OS's probably don't actually print-out an
error-message when free() is given an invalid address.

Here's what I've found:

http://www.avrfreaks.net/forum/error-avrdude-free-invalid-next-size-normal-0x000000000112c720

https://bugs.launchpad.net/ubuntu/+source/avrdude/+bug/1400185

http://www.mikrocontroller.net/attachment/301320/avrdude_crash.txt

http://savannah.nongnu.org/bugs/?41292 (not a usb-tiny-isp)

Otherwise, search-fu is failing me...

Again, from what I can tell, I think this "bug" is probably more-existant than
these results, but I don't know what to search for, because, again, most OS's
probably don't even report an error, and the file *is* created, so basically
it *looks* like the program's exitting normally.

I've done a tiny bit of debugging (within my skillset) and determined that my
encounter with this error appears to occur within avrpart.c:

"avr_free_mem() -> m->buf = 0x9323798"

(maybe it was already freed?)




    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?48776>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.nongnu.org/