ASAN error with R-devel

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

ASAN error with R-devel

R devel mailing list
I have an ASAN enabled version of R-devel on my test machine, and can get it to relably
crash.  Here is the first part of the session:

tmt-local2434% R --vanilla

R Under development (unstable) (2019-06-28 r76752) -- "Unsuffered Consequences"
Platform: x86_64-pc-linux-gnu (64-bit)

R is free software and comes with ABSOLUTELY NO WARRANTY.
You are welcome to redistribute it under certain conditions.
Type 'license()' or 'licence()' for distribution details.

   Natural language support but running in an English locale

R is a collaborative project with many contributors.
Type 'contributors()' for more information and
'citation()' on how to cite R or R packages in publications.

Type 'demo()' for some demos, 'help()' for on-line help, or
'help.start()' for an HTML browser interface to help.
Type 'q()' to quit R.
 > install.packages('kinship2')
Installing package into ‘/home/therneau/Rlib’
(as ‘lib’ is unspecified)
--- Please select a CRAN mirror for use in this session ---
=================================================================
==21606==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000042830 at pc
0x7f9f834fa0f7 bp 0x7fff24ab9050 sp 0x7fff24ab87f8
READ of size 1 at 0x602000042830 thread T0
     #0 0x7f9f834fa0f6 (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)
     #1 0x7f787837d683 in _XimUnRegisterIMInstantiateCallback
(/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64683)
     #2 0x7f7878364d32 in XUnregisterIMInstantiateCallback
(/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bd32)
     #3 0x7f787837d566 in _XimRegisterIMInstantiateCallback
(/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64566)
     #4 0x7f7878364cba in XRegisterIMInstantiateCallback
(/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bcba)
     #5 0x7f78745cddfb in TkpOpenDisplay (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0xf2dfb)
     #6 0x7f787453c769 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x61769)
     #7 0x7f787453d0ab in TkCreateMainWindow (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x620ab)
     #8 0x7f7874548cc6 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6dcc6)
     #9 0x7f7874546c7a (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6bc7a)
     #10 0x7f787453f6c4 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x646c4)
     #11 0x7f7874bf0c0b in tcltk_init /usr/local/src/R-devel/src/library/tcltk/src/tcltk.c:697
     #12 0x5582e3aa93c1 in do_dotCode /usr/local/src/R-devel/src/main/dotcode.c:1743
     #13 0x5582e3b41f79 in bcEval /usr/local/src/R-devel/src/main/eval.c:6775
     #14 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
     #15 0x5582e3b702b9 in R_execClosure /usr/local/src/R-devel/src/main/eval.c:1780
     #16 0x5582e3b72777 in Rf_applyClosure /usr/local/src/R-devel/src/main/eval.c:1706
     #17 0x5582e3b4ab0a in bcEval /usr/local/src/R-devel/src/main/eval.c:6743
     #18 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
     #19 0x5582e3b6c55e in forcePromise /usr/local/src/R-devel/src/main/eval.c:516
     #20 0x5582e3b6d22f in FORCE_PROMISE /usr/local/src/R-devel/src/main/eval.c:4900
  ...
     #133 0x7f788f5e6b96 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
     #134 0x5582e392b999 in _start (/usr/local/src/R-devel/bin/exec/R+0x135999)

0x602000055af0 is located 0 bytes inside of 1-byte region [0x602000055af0,0x602000055af1)
freed by thread T0 here:
     #0 0x7f7891a157b8 in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.4+0xde7b8)
     #1 0x7f7878373d8c in XSetLocaleModifiers (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5ad8c)

previously allocated by thread T0 here:
     #0 0x7f7891a15b50 in __interceptor_malloc
(/usr/lib/x86_64-linux-gnu/libasan.so.4+0xdeb50)
     #1 0x7f7878373984 in _XlcDefaultMapModifiers
(/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5a984)

SUMMARY: AddressSanitizer: heap-use-after-free
(/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)

------------------------------
The window with a choice of machines never appeared.

Terry T.




        [[alternative HTML version deleted]]

______________________________________________
[hidden email] mailing list
https://stat.ethz.ch/mailman/listinfo/r-devel
Reply | Threaded
Open this post in threaded view
|

Re: ASAN error with R-devel

Prof Brian Ripley
This is entirely within your OS's installation of Tcl/Tk and X11: the
latter both allocated and freed.  We've seen it before (even had it as
bug report on R). Please check your OS is fully up-to-date and if so
report it there.

On 01/07/2019 15:55, Therneau, Terry M., Ph.D. via R-devel wrote:

> I have an ASAN enabled version of R-devel on my test machine, and can get it to relably
> crash.  Here is the first part of the session:
>
> tmt-local2434% R --vanilla
>
> R Under development (unstable) (2019-06-28 r76752) -- "Unsuffered Consequences"
> Platform: x86_64-pc-linux-gnu (64-bit)
>
> R is free software and comes with ABSOLUTELY NO WARRANTY.
> You are welcome to redistribute it under certain conditions.
> Type 'license()' or 'licence()' for distribution details.
>
>     Natural language support but running in an English locale
>
> R is a collaborative project with many contributors.
> Type 'contributors()' for more information and
> 'citation()' on how to cite R or R packages in publications.
>
> Type 'demo()' for some demos, 'help()' for on-line help, or
> 'help.start()' for an HTML browser interface to help.
> Type 'q()' to quit R.
>   > install.packages('kinship2')
> Installing package into ‘/home/therneau/Rlib’
> (as ‘lib’ is unspecified)
> --- Please select a CRAN mirror for use in this session ---
> =================================================================
> ==21606==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000042830 at pc
> 0x7f9f834fa0f7 bp 0x7fff24ab9050 sp 0x7fff24ab87f8
> READ of size 1 at 0x602000042830 thread T0
>       #0 0x7f9f834fa0f6 (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)
>       #1 0x7f787837d683 in _XimUnRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64683)
>       #2 0x7f7878364d32 in XUnregisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bd32)
>       #3 0x7f787837d566 in _XimRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64566)
>       #4 0x7f7878364cba in XRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bcba)
>       #5 0x7f78745cddfb in TkpOpenDisplay (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0xf2dfb)
>       #6 0x7f787453c769 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x61769)
>       #7 0x7f787453d0ab in TkCreateMainWindow (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x620ab)
>       #8 0x7f7874548cc6 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6dcc6)
>       #9 0x7f7874546c7a (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6bc7a)
>       #10 0x7f787453f6c4 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x646c4)
>       #11 0x7f7874bf0c0b in tcltk_init /usr/local/src/R-devel/src/library/tcltk/src/tcltk.c:697
>       #12 0x5582e3aa93c1 in do_dotCode /usr/local/src/R-devel/src/main/dotcode.c:1743
>       #13 0x5582e3b41f79 in bcEval /usr/local/src/R-devel/src/main/eval.c:6775
>       #14 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
>       #15 0x5582e3b702b9 in R_execClosure /usr/local/src/R-devel/src/main/eval.c:1780
>       #16 0x5582e3b72777 in Rf_applyClosure /usr/local/src/R-devel/src/main/eval.c:1706
>       #17 0x5582e3b4ab0a in bcEval /usr/local/src/R-devel/src/main/eval.c:6743
>       #18 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
>       #19 0x5582e3b6c55e in forcePromise /usr/local/src/R-devel/src/main/eval.c:516
>       #20 0x5582e3b6d22f in FORCE_PROMISE /usr/local/src/R-devel/src/main/eval.c:4900
>    ...
>       #133 0x7f788f5e6b96 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
>       #134 0x5582e392b999 in _start (/usr/local/src/R-devel/bin/exec/R+0x135999)
>
> 0x602000055af0 is located 0 bytes inside of 1-byte region [0x602000055af0,0x602000055af1)
> freed by thread T0 here:
>       #0 0x7f7891a157b8 in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.4+0xde7b8)
>       #1 0x7f7878373d8c in XSetLocaleModifiers (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5ad8c)
>
> previously allocated by thread T0 here:
>       #0 0x7f7891a15b50 in __interceptor_malloc
> (/usr/lib/x86_64-linux-gnu/libasan.so.4+0xdeb50)
>       #1 0x7f7878373984 in _XlcDefaultMapModifiers
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5a984)
>
> SUMMARY: AddressSanitizer: heap-use-after-free
> (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)
>
> ------------------------------
> The window with a choice of machines never appeared.
>
> Terry T.
>
>
>
>
> [[alternative HTML version deleted]]
>
> ______________________________________________
> [hidden email] mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel
>


--
Brian D. Ripley,                  [hidden email]
Emeritus Professor of Applied Statistics, University of Oxford

______________________________________________
[hidden email] mailing list
https://stat.ethz.ch/mailman/listinfo/r-devel