[Bug nptl/22743] New: __pthread_register_cancel corrupts stack after f81ddabffd

[andrew.n.senkevich at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=22743

            Bug ID: 22743
           Summary: __pthread_register_cancel corrupts stack after
                    f81ddabffd
           Product: glibc
           Version: 2.26
            Status: NEW
          Severity: normal
          Priority: P2
         Component: nptl
          Assignee: unassigned at sourceware dot org
          Reporter: andrew.n.senkevich at gmail dot com
                CC: drepper.fsp at gmail dot com
  Target Milestone: ---

Localized VLC failure from
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887886

__pthread_register_cancel corrupts stack with rewrite of return value for
var_AddCallback on instruction
0x00007ffff79a41d9 <+9>:     mov    %rax,0xc8(%rdi)

Hardware watchpoint 7: *(long int*)0x7fffffffe258

Old value = 140737338902663
New value = 140737488348368
__GI___pthread_register_cancel (buf=0x7fffffffe190) at cleanup.c:32
32      in cleanup.c
(gdb) disas
Dump of assembler code for function __GI___pthread_register_cancel:
   0x00007ffff79a41d0 <+0>:     mov    %fs:0x300,%rax
   0x00007ffff79a41d9 <+9>:     mov    %rax,0xc8(%rdi)
=> 0x00007ffff79a41e0 <+16>:    mov    %fs:0x2f8,%rax
   0x00007ffff79a41e9 <+25>:    mov    %rax,0xd0(%rdi)
   0x00007ffff79a41f0 <+32>:    mov    %rdi,%fs:0x300
   0x00007ffff79a41f9 <+41>:    retq
End of assembler dump.
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x00007fffffffe4d0 in ?? ()
0x00007fffffffe4d0:  add    %al,(%rax)

-- 
You are receiving this mail because:
You are on the CC list for the bug.