segfault in test-strcmp
Roland McGrath
roland@redhat.com
Thu Nov 7 19:27:00 GMT 2002
I looked at the test-strchr crash before the test-strcmp one, but I suspect
the problem is similar. The sysdeps/powerpc/powerpc32/strchr.S code is
accessing the word following the word containing the search character.
This faults because the test string is aligned on the end of a page so that
the following word cannot be accessed (this happens on iteration 157 in
test-strchr with no srandom). The test program is arguably invoking
undefined behavior, because the string is actually not terminated: the
final word of the page contains the search character and three other
nonzero bytes. So a stupid but valid implementation of strchr that called
strlen would crash.
It may be quicker for someone who knows powerpc assembly better than I do
to try to fix this.
More information about the Libc-alpha
mailing list