Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Segmentation fault with branch cxxjit-ni-9.0 #25

Open
jpedrick opened this issue Mar 18, 2021 · 0 comments
Open

Segmentation fault with branch cxxjit-ni-9.0 #25

jpedrick opened this issue Mar 18, 2021 · 0 comments

Comments

@jpedrick
Copy link

Version:

Target: x86_64-unknown-linux-gnu
Thread model: posix

I'm getting a segmentation fault with the following stacktrace:

#0  clang::QualType::getTypePtr (this=<synthetic pointer>) at /home/jpedrick/Development/llvm-project-cxxjit/clang/include/clang/AST/Type.h:6143
#1  clang::QualType::operator-> (this=<synthetic pointer>) at /home/jpedrick/Development/llvm-project-cxxjit/clang/include/clang/AST/Type.h:701
#2  (anonymous namespace)::CompilerData::getTemplateArgumentFromData (this=this@entry=0x12713790, Ty=Ty@entry=..., Values=Values@entry=0x7ffffff77760, Offset=Offset@entry=0, Size=Size@entry=32, TD=<optimized out>,
    Loc=..., Builder=...) at /home/jpedrick/Development/llvm-project-cxxjit/clang/lib/CodeGen/JIT.cpp:1078
#3  0x00007fffefc05797 in (anonymous namespace)::CompilerData::instantiateTemplate (this=this@entry=0x12713790, Values=Values@entry=0x7ffffff77760, Idx=<optimized out>, Idx@entry=2)
    at /home/jpedrick/Development/llvm-project-cxxjit/clang/lib/CodeGen/JIT.cpp:1292
#4  0x00007fffefc22459 in (anonymous namespace)::CompilerData::resolveFunction (this=this@entry=0x12713790, Values=Values@entry=0x7ffffff77760, Idx=Idx@entry=2, Errors=std::vector of length 0, capacity 0,
    Warnings=std::vector of length 0, capacity 0) at /home/jpedrick/Development/llvm-project-cxxjit/clang/lib/CodeGen/JIT.cpp:1412
#5  0x00007fffefc25359 in __clang_jit_i (CmdArgs=0xefa3a6, CmdArgsLen=3296, ASTBuffer=<optimized out>, ASTBufferSize=270817312, IRBuffer=0xd6ab55, IRBufferSize=1636432, LocalPtrs=0x11577a00, LocalPtrsCnt=1,
    LocalDbgPtrs=0x11577a10, LocalDbgPtrsCnt=534, DeviceData=0x0, DevCnt=0, Values=0x7ffffff77760, ValuesSize=64,
    InstKey=0xd5e421 "_ZN6sample24make_<omitted>__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE#_ZTSNSt7__cxx1112basic_stringIcSt11char_trait"..., Idx=2, DFTI=0x7ffffff777a8) at /home/jpedrick/Development/llvm-project-cxxjit/clang/lib/CodeGen/JIT.cpp:1926

<The rest is from proprietary code I'm not at liberty to share>

A snippet of how I'm using cxxjit with types/most logic omitted:

template <typename P1, typename P2>
struct ParametersT {
  using param1 = P1;
  using param2 = P1;
};


template <typename P1, typename P2 >
[[clang::for_dynamic_instantiation]] std::shared_ptr< ATemplateClassBase >
make_ATemplateClass_internal( int val ) {
    return std::make_shared< ATemplateClass< ParametersT<P1, P2> > >( val );
}

std::shared_ptr< ATemplateClassBase >
make_ATemplateClass( int val )
{
  auto f = __clang_dynamic_function_template_instantiation<make_ATemplateClass_internal>( std::tuple<A,B,C>, std::tuple<D,E,F> );
  return f( val  );
}

dutiona pushed a commit to dutiona/llvm-project-cxxjit that referenced this issue Dec 21, 2023
When `Target::GetEntryPointAddress()` calls `exe_module->GetObjectFile()->GetEntryPointAddress()`, and the returned
`entry_addr` is valid, it can immediately be returned.

However, just before that, an `llvm::Error` value has been setup, but in this case it is not consumed before returning, like is done further below in the function.

In https://bugs.freebsd.org/248745 we got a bug report for this, where a very simple test case aborts and dumps core:

```
* thread hfinkel#1, name = 'testcase', stop reason = breakpoint 1.1
    frame #0: 0x00000000002018d4 testcase`main(argc=1, argv=0x00007fffffffea18) at testcase.c:3:5
   1	int main(int argc, char *argv[])
   2	{
-> 3	    return 0;
   4	}
(lldb) p argc
Program aborted due to an unhandled Error:
Error value was Success. (Note: Success values must still be checked prior to being destroyed).

Thread 1 received signal SIGABRT, Aborted.
thr_kill () at thr_kill.S:3
3	thr_kill.S: No such file or directory.
(gdb) bt
#0  thr_kill () at thr_kill.S:3
hfinkel#1  0x00000008049a0004 in __raise (s=6) at /usr/src/lib/libc/gen/raise.c:52
hfinkel#2  0x0000000804916229 in abort () at /usr/src/lib/libc/stdlib/abort.c:67
hfinkel#3  0x000000000451b5f5 in fatalUncheckedError () at /usr/src/contrib/llvm-project/llvm/lib/Support/Error.cpp:112
hfinkel#4  0x00000000019cf008 in GetEntryPointAddress () at /usr/src/contrib/llvm-project/llvm/include/llvm/Support/Error.h:267
hfinkel#5  0x0000000001bccbd8 in ConstructorSetup () at /usr/src/contrib/llvm-project/lldb/source/Target/ThreadPlanCallFunction.cpp:67
hfinkel#6  0x0000000001bcd2c0 in ThreadPlanCallFunction () at /usr/src/contrib/llvm-project/lldb/source/Target/ThreadPlanCallFunction.cpp:114
hfinkel#7  0x00000000020076d4 in InferiorCallMmap () at /usr/src/contrib/llvm-project/lldb/source/Plugins/Process/Utility/InferiorCallPOSIX.cpp:97
hfinkel#8  0x0000000001f4be33 in DoAllocateMemory () at /usr/src/contrib/llvm-project/lldb/source/Plugins/Process/FreeBSD/ProcessFreeBSD.cpp:604
hfinkel#9  0x0000000001fe51b9 in AllocatePage () at /usr/src/contrib/llvm-project/lldb/source/Target/Memory.cpp:347
hfinkel#10 0x0000000001fe5385 in AllocateMemory () at /usr/src/contrib/llvm-project/lldb/source/Target/Memory.cpp:383
hfinkel#11 0x0000000001974da2 in AllocateMemory () at /usr/src/contrib/llvm-project/lldb/source/Target/Process.cpp:2301
hfinkel#12 CanJIT () at /usr/src/contrib/llvm-project/lldb/source/Target/Process.cpp:2331
hfinkel#13 0x0000000001a1bf3d in Evaluate () at /usr/src/contrib/llvm-project/lldb/source/Expression/UserExpression.cpp:190
hfinkel#14 0x00000000019ce7a2 in EvaluateExpression () at /usr/src/contrib/llvm-project/lldb/source/Target/Target.cpp:2372
hfinkel#15 0x0000000001ad784c in EvaluateExpression () at /usr/src/contrib/llvm-project/lldb/source/Commands/CommandObjectExpression.cpp:414
hfinkel#16 0x0000000001ad86ae in DoExecute () at /usr/src/contrib/llvm-project/lldb/source/Commands/CommandObjectExpression.cpp:646
hfinkel#17 0x0000000001a5e3ed in Execute () at /usr/src/contrib/llvm-project/lldb/source/Interpreter/CommandObject.cpp:1003
hfinkel#18 0x0000000001a6c4a3 in HandleCommand () at /usr/src/contrib/llvm-project/lldb/source/Interpreter/CommandInterpreter.cpp:1762
hfinkel#19 0x0000000001a6f98c in IOHandlerInputComplete () at /usr/src/contrib/llvm-project/lldb/source/Interpreter/CommandInterpreter.cpp:2760
hfinkel#20 0x0000000001a90b08 in Run () at /usr/src/contrib/llvm-project/lldb/source/Core/IOHandler.cpp:548
hfinkel#21 0x00000000019a6c6a in ExecuteIOHandlers () at /usr/src/contrib/llvm-project/lldb/source/Core/Debugger.cpp:903
hfinkel#22 0x0000000001a70337 in RunCommandInterpreter () at /usr/src/contrib/llvm-project/lldb/source/Interpreter/CommandInterpreter.cpp:2946
hfinkel#23 0x0000000001d9d812 in RunCommandInterpreter () at /usr/src/contrib/llvm-project/lldb/source/API/SBDebugger.cpp:1169
hfinkel#24 0x0000000001918be8 in MainLoop () at /usr/src/contrib/llvm-project/lldb/tools/driver/Driver.cpp:675
hfinkel#25 0x000000000191a114 in main () at /usr/src/contrib/llvm-project/lldb/tools/driver/Driver.cpp:890```

Fix the incorrect error catch by only instantiating an `Error` object if it is necessary.

Reviewed By: JDevlieghere

Differential Revision: https://reviews.llvm.org/D86355

(cherry picked from commit 1ce07cd)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant