OS X build fix #3

juhagman · 2012-12-13T16:32:10Z

This fixed building REBOL on OS X 10.8.2 with latest tools.

…ks Rebol struct alignment. Force 32-bit build and link.

- clean should remove objs directory, otherwise subsequent builds will fail. - use -f to suppress warning for missing libr3.so

carls · 2012-12-13T18:54:50Z

Thanks Jussi. You were quick to learn the systems.r file format. Well done.

OS X build fix

Instead of a child window, which will be clipped by its parent window. See atronix bug #3

It will confuse Expand_Series expects "tail" to be the actual size, and cause a read beyond the allocated memory, or heap buffer overflow found by address sanitizer of GCC: ================================================================= ==10856==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62a00000b201 at pc 0x47df61 bp 0x7fffffff2ca0 sp 0x7fffffff2c98 READ of size 1 at 0x62a00000b201 thread T0 #0 0x47df60 in Expand_Series ../src/core/m-series.c:145 #1 0x47e5a7 in Extend_Series ../src/core/m-series.c:187 rebol#2 0x466e0c in Scan_Quote ../src/core/l-scan.c:462 rebol#3 0x46a797 in Scan_Token ../src/core/l-scan.c:918 rebol#4 0x46e263 in Scan_Block ../src/core/l-scan.c:1188 rebol#5 0x46e722 in Scan_Code ../src/core/l-scan.c:1548 rebol#6 0x46e886 in Scan_Source ../src/core/l-scan.c:1568 rebol#7 0x4cb85c in Make_Block_Type ../src/core/t-block.c:306 rebol#8 0x4cd1b8 in T_Block ../src/core/t-block.c:608 rebol#9 0x4d042e in T_Datatype ../src/core/t-datatype.c:92 rebol#10 0x42e080 in Do_Act ../src/core/c-function.c:338 rebol#11 0x42e7e5 in Do_Action ../src/core/c-function.c:396 rebol#12 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#13 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#14 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#15 0x482dd2 in N_case ../src/core/n-control.c:349 rebol#16 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#17 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#18 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#19 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#20 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#21 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#22 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#23 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#24 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#25 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#26 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#27 0x48201c in N_all ../src/core/n-control.c:261 rebol#28 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#29 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#30 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#31 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#32 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#33 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#34 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#35 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#36 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#37 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#38 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#39 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#40 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#41 0x48459c in N_if ../src/core/n-control.c:619 rebol#42 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#43 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#44 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#45 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#46 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#47 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#48 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#49 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#50 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#51 0x418fb4 in Apply_Block ../src/core/c-do.c:1474 rebol#52 0x4824fb in N_apply ../src/core/n-control.c:295 rebol#53 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#54 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#55 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#56 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#57 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#58 0x485388 in N_unless ../src/core/n-control.c:763 rebol#59 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#60 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#61 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#62 0x483eff in N_do ../src/core/n-control.c:523 rebol#63 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#64 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#65 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#66 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#67 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#68 0x48459c in N_if ../src/core/n-control.c:619 rebol#69 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#70 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#71 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#72 0x48f8cc in Loop_Integer ../src/core/n-loop.c:130 rebol#73 0x49314d in N_repeat ../src/core/n-loop.c:631 rebol#74 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#75 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#76 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#77 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#78 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#79 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#80 0x485388 in N_unless ../src/core/n-control.c:763 rebol#81 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#82 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#83 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#84 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#85 0x418fb4 in Apply_Block ../src/core/c-do.c:1474 rebol#86 0x4824fb in N_apply ../src/core/n-control.c:295 rebol#87 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#88 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#89 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#90 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#91 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#92 0x485388 in N_unless ../src/core/n-control.c:763 rebol#93 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#94 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#95 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#96 0x483eff in N_do ../src/core/n-control.c:523 rebol#97 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#98 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#99 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#100 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#101 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#102 0x48459c in N_if ../src/core/n-control.c:619 rebol#103 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#104 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#105 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#106 0x48f8cc in Loop_Integer ../src/core/n-loop.c:130 rebol#107 0x49314d in N_repeat ../src/core/n-loop.c:631 rebol#108 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#109 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#110 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#111 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#112 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#113 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#114 0x485388 in N_unless ../src/core/n-control.c:763 rebol#115 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#116 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#117 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#118 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#119 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#120 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#121 0x484cf1 in N_switch ../src/core/n-control.c:716 rebol#122 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#123 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#124 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#125 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#126 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#127 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#128 0x48459c in N_if ../src/core/n-control.c:619 rebol#129 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#130 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#131 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#132 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#133 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#134 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#135 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#136 0x484280 in N_either ../src/core/n-control.c:595 rebol#137 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#138 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#139 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#140 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#141 0x419631 in Apply_Function ../src/core/c-do.c:1518 rebol#142 0x419918 in Apply_Func ../src/core/c-do.c:1545 rebol#143 0x48d102 in N_wake_up ../src/core/n-io.c:415 rebol#144 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#145 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#146 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#147 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#148 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#149 0x492b66 in N_loop ../src/core/n-loop.c:590 rebol#150 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#151 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#152 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#153 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#154 0x419631 in Apply_Function ../src/core/c-do.c:1518 rebol#155 0x419918 in Apply_Func ../src/core/c-do.c:1545 rebol#156 0x42fef7 in Awake_System ../src/core/c-port.c:198 rebol#157 0x43012a in Wait_Ports ../src/core/c-port.c:231 rebol#158 0x48cd62 in N_wait ../src/core/n-io.c:374 rebol#159 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#160 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#161 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#162 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#163 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#164 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#165 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#166 0x4929a7 in N_forever ../src/core/n-loop.c:527 rebol#167 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#168 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#169 0x4152ff in Try_Block ../src/core/c-do.c:1077 rebol#170 0x48507e in N_try ../src/core/n-control.c:740 rebol#171 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#172 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#173 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#174 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#175 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#176 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#177 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#178 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#179 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#180 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#181 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#182 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#183 0x48459c in N_if ../src/core/n-control.c:619 rebol#184 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#185 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#186 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#187 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#188 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#189 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#190 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#191 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#192 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#193 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#194 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#195 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#196 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#197 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#198 0x48201c in N_all ../src/core/n-control.c:261 rebol#199 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#200 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#201 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#202 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#203 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#204 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#205 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#206 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#207 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#208 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#209 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#210 0x485388 in N_unless ../src/core/n-control.c:763 rebol#211 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#212 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#213 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#214 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#215 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#216 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#217 0x48459c in N_if ../src/core/n-control.c:619 rebol#218 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#219 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#220 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#221 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#222 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#223 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#224 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#225 0x48201c in N_all ../src/core/n-control.c:261 rebol#226 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#227 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#228 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#229 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#230 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#231 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#232 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#233 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#234 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#235 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#236 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#237 0x48459c in N_if ../src/core/n-control.c:619 rebol#238 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#239 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#240 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#241 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#242 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#243 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#244 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#245 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#246 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#247 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#248 0x48459c in N_if ../src/core/n-control.c:619 rebol#249 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#250 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#251 0x414825 in Do_Blk ../src/core/c-do.c:1010 0x62a00000b201 is located 1 bytes to the right of 20480-byte region [0x62a000006200,0x62a00000b200) allocated by thread T0 here: #0 0x7ffff6f58b1f in malloc (/usr/lib/libasan.so.1+0x54b1f) #1 0x47924a in Make_Mem ../src/core/m-pools.c:121 rebol#2 0x47a9ff in Make_Series ../src/core/m-pools.c:406 rebol#3 0x4aee84 in Make_Unicode ../src/core/s-make.c:59 rebol#4 0x4bb797 in Init_Mold ../src/core/s-mold.c:1425 rebol#5 0x40da64 in Init_Core ../src/core/b-init.c:940 rebol#6 0x4055e0 in RL_Init ../src/core/a-lib.c:124 rebol#7 0x580aa2 in main ../src/os/host-main.c:154 rebol#8 0x7ffff5719fff in __libc_start_main (/usr/lib/libc.so.6+0x1ffff) SUMMARY: AddressSanitizer: heap-buffer-overflow ../src/core/m-series.c:145 Expand_Series Shadow bytes around the buggy address: 0x0c547fff95f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c547fff9640:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9650: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9660: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9670: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9690: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal:

Found by AddressSanitizer: ==8157==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61d0000f5897 at pc 0x4816ef bp 0x7fffffffafb0 sp 0x7fffffffafa0 READ of size 1 at 0x61d0000f5897 thread T0 #0 0x4816ee in Expand_Series ../src/core/m-series.c:138 #1 0x4e258c in Insert_Gobs ../src/core/t-gob.c:219 rebol#2 0x4e7782 in T_Gob ../src/core/t-gob.c:833 rebol#3 0x42e26f in Do_Act ../src/core/c-function.c:338 rebol#4 0x42e9d8 in Do_Action ../src/core/c-function.c:396 rebol#5 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#6 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#7 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#8 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#9 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#10 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#11 0x4893c0 in N_unless ../src/core/n-control.c:792 rebol#12 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#13 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#14 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#15 0x488c03 in N_switch ../src/core/n-control.c:736 rebol#16 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#17 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#18 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#19 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#20 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#21 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#22 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#23 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#24 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#25 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#26 0x4862f8 in N_attempt ../src/core/n-control.c:306 rebol#27 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#28 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#29 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#30 0x493bb9 in Loop_Integer ../src/core/n-loop.c:131 rebol#31 0x49693a in N_for ../src/core/n-loop.c:486 rebol#32 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#33 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#34 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#35 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#36 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#37 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#38 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#39 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#40 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#41 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#42 0x488f7d in N_try ../src/core/n-control.c:760 rebol#43 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#44 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#45 0x4118a1 in Do_Args ../src/core/c-do.c:668 rebol#46 0x413700 in Do_Next ../src/core/c-do.c:879 rebol#47 0x4118a1 in Do_Args ../src/core/c-do.c:668 rebol#48 0x413700 in Do_Next ../src/core/c-do.c:879 rebol#49 0x414f2f in Do_Block_Value_Throw ../src/core/c-do.c:1048 rebol#50 0x5725ac in Parse_Rules_Loop ../src/core/u-parse.c:830 rebol#51 0x5731f8 in Parse_Rules_Loop ../src/core/u-parse.c:927 rebol#52 0x56c799 in Parse_Series ../src/core/u-parse.c:96 rebol#53 0x576950 in N_parse ../src/core/u-parse.c:1269 rebol#54 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#55 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#56 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#57 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#58 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#59 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#60 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#61 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#62 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#63 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#64 0x4862f8 in N_attempt ../src/core/n-control.c:306 rebol#65 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#66 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#67 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#68 0x487b91 in N_do ../src/core/n-control.c:524 rebol#69 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#70 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#71 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#72 0x487fcb in N_either ../src/core/n-control.c:598 rebol#73 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#74 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#75 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#76 0x487fcb in N_either ../src/core/n-control.c:598 rebol#77 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#78 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#79 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#80 0x487fcb in N_either ../src/core/n-control.c:598 rebol#81 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#82 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#83 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#84 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#85 0x4198c2 in Apply_Function ../src/core/c-do.c:1524 rebol#86 0x419fa8 in Do_Sys_Func ../src/core/c-do.c:1584 rebol#87 0x41e406 in Init_Mezz ../src/core/c-do.c:2313 rebol#88 0x405fd3 in RL_Start ../src/core/a-lib.c:167 rebol#89 0x59d1f7 in main ../src/os/host-main.c:231 rebol#90 0x7ffff571403f in __libc_start_main (/usr/lib/libc.so.6+0x2003f) rebol#91 0x405858 (/home/zsx/work/r3.git/make/r3-view-linux+0x405858) 0x61d0000f5897 is located 7 bytes to the right of 2064-byte region [0x61d0000f5080,0x61d0000f5890) allocated by thread T0 here: #0 0x7ffff6f56b77 in __interceptor_malloc (/usr/lib/libasan.so.1+0x57b77) #1 0x47c300 in Make_Mem ../src/core/m-pools.c:125 rebol#2 0x47ca2f in Fill_Pool ../src/core/m-pools.c:233 rebol#3 0x47d80c in Make_Series ../src/core/m-pools.c:388 rebol#4 0x4826f3 in Copy_Series ../src/core/m-series.c:261 rebol#5 0x43ca14 in Copy_Deep_Values ../src/core/f-blocks.c:131 rebol#6 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#7 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#8 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#9 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#10 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#11 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#12 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#13 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#14 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#15 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#16 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#17 0x43cd30 in Copy_Block_Values ../src/core/f-blocks.c:159 rebol#18 0x43cd9f in Clone_Block ../src/core/f-blocks.c:174 rebol#19 0x42db12 in Clone_Function ../src/core/c-function.c:266 rebol#20 0x43cc00 in Copy_Deep_Values ../src/core/f-blocks.c:139 rebol#21 0x43cd30 in Copy_Block_Values ../src/core/f-blocks.c:159 rebol#22 0x4fd371 in T_Object ../src/core/t-object.c:364 rebol#23 0x42e26f in Do_Act ../src/core/c-function.c:338 rebol#24 0x42e9d8 in Do_Action ../src/core/c-function.c:396 rebol#25 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#26 0x4133cc in Do_Next ../src/core/c-do.c:860 rebol#27 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#28 0x493bb9 in Loop_Integer ../src/core/n-loop.c:131 rebol#29 0x49693a in N_for ../src/core/n-loop.c:486 SUMMARY: AddressSanitizer: heap-buffer-overflow ../src/core/m-series.c:138 Expand_Series Shadow bytes around the buggy address: 0x0c3a80016ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c3a80016b10: 00 00[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==8157==ABORTING This is happening because "GOB_TAIL(gob) = count" sets the tail of a series with length of "count" to be "count", and Expand_Series expects a terminator in the series. (m-series.c:90 size = (series->tail + 1) * wide;)

Reported by AddressSanitizer of GCC: Direct leak of 970518528 byte(s) in 947772 object(s) allocated from: #0 0x7f505036363f in operator new[](unsigned long) (/usr/lib/libasan.so.1+0x5863f) #1 0x65676f in agg::agg_graphics::agg_gradient_pen(int, double, double, double, double, double, double, double, unsigned char*, double*, int) ../src/agg/agg_graphics.cpp:1306 rebol#2 0x5fe247 in rebdrw_gradient_pen ../src/os/host-draw-api-agg.cpp:184 rebol#3 0x5f8834 in RXD_Draw ../src/os/host-draw.c:294 rebol#4 0x45cd8e in Do_Commands ../src/core/f-extension.c:579 rebol#5 0x40680d in RL_Do_Commands ../src/core/a-lib.c:376 rebol#6 0x603d21 in rebdrw_gob_draw ../src/os/host-draw-api-agg.cpp:567 rebol#7 0x60c732 in process_gobs ../src/os/linux/host-compositor.c:520 rebol#8 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#9 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#10 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#11 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#12 0x60f753 in rebcmp_compose ../src/os/linux/host-compositor.c:685 rebol#13 0x5e8299 in Draw_Window ../src/os/host-view.c:225 rebol#14 0x5e8682 in Show_Gob ../src/os/host-view.c:288 rebol#15 0x5e8b58 in RXD_Graphics ../src/os/host-view.c:346 rebol#16 0x45bf75 in Do_Command ../src/core/f-extension.c:456 rebol#17 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#18 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#19 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#20 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#21 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#22 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#23 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#24 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#25 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#26 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#27 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#28 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#29 0x496d2f in N_forever ../src/core/n-loop.c:532

Instead of a child window, which will be clipped by its parent window. See atronix bug rebol#3

It will confuse Expand_Series expects "tail" to be the actual size, and cause a read beyond the allocated memory, or heap buffer overflow found by address sanitizer of GCC: ================================================================= ==10856==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x62a00000b201 at pc 0x47df61 bp 0x7fffffff2ca0 sp 0x7fffffff2c98 READ of size 1 at 0x62a00000b201 thread T0 #0 0x47df60 in Expand_Series ../src/core/m-series.c:145 #1 0x47e5a7 in Extend_Series ../src/core/m-series.c:187 rebol#2 0x466e0c in Scan_Quote ../src/core/l-scan.c:462 rebol#3 0x46a797 in Scan_Token ../src/core/l-scan.c:918 rebol#4 0x46e263 in Scan_Block ../src/core/l-scan.c:1188 rebol#5 0x46e722 in Scan_Code ../src/core/l-scan.c:1548 rebol#6 0x46e886 in Scan_Source ../src/core/l-scan.c:1568 rebol#7 0x4cb85c in Make_Block_Type ../src/core/t-block.c:306 rebol#8 0x4cd1b8 in T_Block ../src/core/t-block.c:608 rebol#9 0x4d042e in T_Datatype ../src/core/t-datatype.c:92 rebol#10 0x42e080 in Do_Act ../src/core/c-function.c:338 rebol#11 0x42e7e5 in Do_Action ../src/core/c-function.c:396 rebol#12 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#13 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#14 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#15 0x482dd2 in N_case ../src/core/n-control.c:349 rebol#16 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#17 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#18 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#19 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#20 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#21 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#22 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#23 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#24 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#25 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#26 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#27 0x48201c in N_all ../src/core/n-control.c:261 rebol#28 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#29 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#30 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#31 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#32 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#33 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#34 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#35 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#36 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#37 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#38 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#39 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#40 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#41 0x48459c in N_if ../src/core/n-control.c:619 rebol#42 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#43 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#44 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#45 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#46 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#47 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#48 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#49 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#50 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#51 0x418fb4 in Apply_Block ../src/core/c-do.c:1474 rebol#52 0x4824fb in N_apply ../src/core/n-control.c:295 rebol#53 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#54 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#55 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#56 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#57 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#58 0x485388 in N_unless ../src/core/n-control.c:763 rebol#59 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#60 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#61 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#62 0x483eff in N_do ../src/core/n-control.c:523 rebol#63 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#64 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#65 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#66 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#67 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#68 0x48459c in N_if ../src/core/n-control.c:619 rebol#69 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#70 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#71 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#72 0x48f8cc in Loop_Integer ../src/core/n-loop.c:130 rebol#73 0x49314d in N_repeat ../src/core/n-loop.c:631 rebol#74 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#75 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#76 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#77 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#78 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#79 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#80 0x485388 in N_unless ../src/core/n-control.c:763 rebol#81 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#82 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#83 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#84 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#85 0x418fb4 in Apply_Block ../src/core/c-do.c:1474 rebol#86 0x4824fb in N_apply ../src/core/n-control.c:295 rebol#87 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#88 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#89 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#90 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#91 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#92 0x485388 in N_unless ../src/core/n-control.c:763 rebol#93 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#94 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#95 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#96 0x483eff in N_do ../src/core/n-control.c:523 rebol#97 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#98 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#99 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#100 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#101 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#102 0x48459c in N_if ../src/core/n-control.c:619 rebol#103 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#104 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#105 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#106 0x48f8cc in Loop_Integer ../src/core/n-loop.c:130 rebol#107 0x49314d in N_repeat ../src/core/n-loop.c:631 rebol#108 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#109 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#110 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#111 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#112 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#113 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#114 0x485388 in N_unless ../src/core/n-control.c:763 rebol#115 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#116 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#117 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#118 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#119 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#120 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#121 0x484cf1 in N_switch ../src/core/n-control.c:716 rebol#122 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#123 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#124 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#125 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#126 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#127 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#128 0x48459c in N_if ../src/core/n-control.c:619 rebol#129 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#130 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#131 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#132 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#133 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#134 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#135 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#136 0x484280 in N_either ../src/core/n-control.c:595 rebol#137 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#138 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#139 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#140 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#141 0x419631 in Apply_Function ../src/core/c-do.c:1518 rebol#142 0x419918 in Apply_Func ../src/core/c-do.c:1545 rebol#143 0x48d102 in N_wake_up ../src/core/n-io.c:415 rebol#144 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#145 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#146 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#147 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#148 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#149 0x492b66 in N_loop ../src/core/n-loop.c:590 rebol#150 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#151 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#152 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#153 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#154 0x419631 in Apply_Function ../src/core/c-do.c:1518 rebol#155 0x419918 in Apply_Func ../src/core/c-do.c:1545 rebol#156 0x42fef7 in Awake_System ../src/core/c-port.c:198 rebol#157 0x43012a in Wait_Ports ../src/core/c-port.c:231 rebol#158 0x48cd62 in N_wait ../src/core/n-io.c:374 rebol#159 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#160 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#161 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#162 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#163 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#164 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#165 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#166 0x4929a7 in N_forever ../src/core/n-loop.c:527 rebol#167 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#168 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#169 0x4152ff in Try_Block ../src/core/c-do.c:1077 rebol#170 0x48507e in N_try ../src/core/n-control.c:740 rebol#171 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#172 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#173 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#174 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#175 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#176 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#177 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#178 0x4133c9 in Do_Next ../src/core/c-do.c:877 rebol#179 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#180 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#181 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#182 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#183 0x48459c in N_if ../src/core/n-control.c:619 rebol#184 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#185 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#186 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#187 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#188 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#189 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#190 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#191 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#192 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#193 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#194 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#195 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#196 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#197 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#198 0x48201c in N_all ../src/core/n-control.c:261 rebol#199 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#200 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#201 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#202 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#203 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#204 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#205 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#206 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#207 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#208 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#209 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#210 0x485388 in N_unless ../src/core/n-control.c:763 rebol#211 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#212 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#213 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#214 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#215 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#216 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#217 0x48459c in N_if ../src/core/n-control.c:619 rebol#218 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#219 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#220 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#221 0x42ee10 in Do_Closure ../src/core/c-function.c:459 rebol#222 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#223 0x4115f2 in Do_Args ../src/core/c-do.c:669 rebol#224 0x414152 in Do_Next ../src/core/c-do.c:939 rebol#225 0x48201c in N_all ../src/core/n-control.c:261 rebol#226 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#227 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#228 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#229 0x491abc in Loop_Each ../src/core/n-loop.c:410 rebol#230 0x492a6c in N_foreach ../src/core/n-loop.c:546 rebol#231 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#232 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#233 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#234 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#235 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#236 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#237 0x48459c in N_if ../src/core/n-control.c:619 rebol#238 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#239 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#240 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#241 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#242 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#243 0x41309b in Do_Next ../src/core/c-do.c:858 rebol#244 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#245 0x42e869 in Do_Function ../src/core/c-function.c:415 rebol#246 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#247 0x414825 in Do_Blk ../src/core/c-do.c:1010 rebol#248 0x48459c in N_if ../src/core/n-control.c:619 rebol#249 0x42dbb7 in Do_Native ../src/core/c-function.c:289 rebol#250 0x413628 in Do_Next ../src/core/c-do.c:884 rebol#251 0x414825 in Do_Blk ../src/core/c-do.c:1010 0x62a00000b201 is located 1 bytes to the right of 20480-byte region [0x62a000006200,0x62a00000b200) allocated by thread T0 here: #0 0x7ffff6f58b1f in malloc (/usr/lib/libasan.so.1+0x54b1f) #1 0x47924a in Make_Mem ../src/core/m-pools.c:121 rebol#2 0x47a9ff in Make_Series ../src/core/m-pools.c:406 rebol#3 0x4aee84 in Make_Unicode ../src/core/s-make.c:59 rebol#4 0x4bb797 in Init_Mold ../src/core/s-mold.c:1425 rebol#5 0x40da64 in Init_Core ../src/core/b-init.c:940 rebol#6 0x4055e0 in RL_Init ../src/core/a-lib.c:124 rebol#7 0x580aa2 in main ../src/os/host-main.c:154 rebol#8 0x7ffff5719fff in __libc_start_main (/usr/lib/libc.so.6+0x1ffff) SUMMARY: AddressSanitizer: heap-buffer-overflow ../src/core/m-series.c:145 Expand_Series Shadow bytes around the buggy address: 0x0c547fff95f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9610: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9620: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c547fff9630: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c547fff9640:[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9650: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9660: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9670: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9680: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c547fff9690: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal:

Found by AddressSanitizer: ==8157==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61d0000f5897 at pc 0x4816ef bp 0x7fffffffafb0 sp 0x7fffffffafa0 READ of size 1 at 0x61d0000f5897 thread T0 #0 0x4816ee in Expand_Series ../src/core/m-series.c:138 #1 0x4e258c in Insert_Gobs ../src/core/t-gob.c:219 rebol#2 0x4e7782 in T_Gob ../src/core/t-gob.c:833 rebol#3 0x42e26f in Do_Act ../src/core/c-function.c:338 rebol#4 0x42e9d8 in Do_Action ../src/core/c-function.c:396 rebol#5 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#6 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#7 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#8 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#9 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#10 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#11 0x4893c0 in N_unless ../src/core/n-control.c:792 rebol#12 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#13 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#14 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#15 0x488c03 in N_switch ../src/core/n-control.c:736 rebol#16 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#17 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#18 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#19 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#20 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#21 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#22 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#23 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#24 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#25 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#26 0x4862f8 in N_attempt ../src/core/n-control.c:306 rebol#27 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#28 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#29 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#30 0x493bb9 in Loop_Integer ../src/core/n-loop.c:131 rebol#31 0x49693a in N_for ../src/core/n-loop.c:486 rebol#32 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#33 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#34 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#35 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#36 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#37 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#38 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#39 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#40 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#41 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#42 0x488f7d in N_try ../src/core/n-control.c:760 rebol#43 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#44 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#45 0x4118a1 in Do_Args ../src/core/c-do.c:668 rebol#46 0x413700 in Do_Next ../src/core/c-do.c:879 rebol#47 0x4118a1 in Do_Args ../src/core/c-do.c:668 rebol#48 0x413700 in Do_Next ../src/core/c-do.c:879 rebol#49 0x414f2f in Do_Block_Value_Throw ../src/core/c-do.c:1048 rebol#50 0x5725ac in Parse_Rules_Loop ../src/core/u-parse.c:830 rebol#51 0x5731f8 in Parse_Rules_Loop ../src/core/u-parse.c:927 rebol#52 0x56c799 in Parse_Series ../src/core/u-parse.c:96 rebol#53 0x576950 in N_parse ../src/core/u-parse.c:1269 rebol#54 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#55 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#56 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#57 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#58 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#59 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#60 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#61 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#62 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#63 0x415658 in Try_Block ../src/core/c-do.c:1083 rebol#64 0x4862f8 in N_attempt ../src/core/n-control.c:306 rebol#65 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#66 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#67 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#68 0x487b91 in N_do ../src/core/n-control.c:524 rebol#69 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#70 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#71 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#72 0x487fcb in N_either ../src/core/n-control.c:598 rebol#73 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#74 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#75 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#76 0x487fcb in N_either ../src/core/n-control.c:598 rebol#77 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#78 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#79 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#80 0x487fcb in N_either ../src/core/n-control.c:598 rebol#81 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#82 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#83 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#84 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#85 0x4198c2 in Apply_Function ../src/core/c-do.c:1524 rebol#86 0x419fa8 in Do_Sys_Func ../src/core/c-do.c:1584 rebol#87 0x41e406 in Init_Mezz ../src/core/c-do.c:2313 rebol#88 0x405fd3 in RL_Start ../src/core/a-lib.c:167 rebol#89 0x59d1f7 in main ../src/os/host-main.c:231 rebol#90 0x7ffff571403f in __libc_start_main (/usr/lib/libc.so.6+0x2003f) rebol#91 0x405858 (/home/zsx/work/r3.git/make/r3-view-linux+0x405858) 0x61d0000f5897 is located 7 bytes to the right of 2064-byte region [0x61d0000f5080,0x61d0000f5890) allocated by thread T0 here: #0 0x7ffff6f56b77 in __interceptor_malloc (/usr/lib/libasan.so.1+0x57b77) #1 0x47c300 in Make_Mem ../src/core/m-pools.c:125 rebol#2 0x47ca2f in Fill_Pool ../src/core/m-pools.c:233 rebol#3 0x47d80c in Make_Series ../src/core/m-pools.c:388 rebol#4 0x4826f3 in Copy_Series ../src/core/m-series.c:261 rebol#5 0x43ca14 in Copy_Deep_Values ../src/core/f-blocks.c:131 rebol#6 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#7 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#8 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#9 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#10 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#11 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#12 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#13 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#14 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#15 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#16 0x43cb82 in Copy_Deep_Values ../src/core/f-blocks.c:136 rebol#17 0x43cd30 in Copy_Block_Values ../src/core/f-blocks.c:159 rebol#18 0x43cd9f in Clone_Block ../src/core/f-blocks.c:174 rebol#19 0x42db12 in Clone_Function ../src/core/c-function.c:266 rebol#20 0x43cc00 in Copy_Deep_Values ../src/core/f-blocks.c:139 rebol#21 0x43cd30 in Copy_Block_Values ../src/core/f-blocks.c:159 rebol#22 0x4fd371 in T_Object ../src/core/t-object.c:364 rebol#23 0x42e26f in Do_Act ../src/core/c-function.c:338 rebol#24 0x42e9d8 in Do_Action ../src/core/c-function.c:396 rebol#25 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#26 0x4133cc in Do_Next ../src/core/c-do.c:860 rebol#27 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#28 0x493bb9 in Loop_Integer ../src/core/n-loop.c:131 rebol#29 0x49693a in N_for ../src/core/n-loop.c:486 SUMMARY: AddressSanitizer: heap-buffer-overflow ../src/core/m-series.c:138 Expand_Series Shadow bytes around the buggy address: 0x0c3a80016ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c3a80016b10: 00 00[fa]fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b30: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b40: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a80016b50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c3a80016b60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==8157==ABORTING This is happening because "GOB_TAIL(gob) = count" sets the tail of a series with length of "count" to be "count", and Expand_Series expects a terminator in the series. (m-series.c:90 size = (series->tail + 1) * wide;)

Reported by AddressSanitizer of GCC: Direct leak of 970518528 byte(s) in 947772 object(s) allocated from: #0 0x7f505036363f in operator new[](unsigned long) (/usr/lib/libasan.so.1+0x5863f) #1 0x65676f in agg::agg_graphics::agg_gradient_pen(int, double, double, double, double, double, double, double, unsigned char*, double*, int) ../src/agg/agg_graphics.cpp:1306 rebol#2 0x5fe247 in rebdrw_gradient_pen ../src/os/host-draw-api-agg.cpp:184 rebol#3 0x5f8834 in RXD_Draw ../src/os/host-draw.c:294 rebol#4 0x45cd8e in Do_Commands ../src/core/f-extension.c:579 rebol#5 0x40680d in RL_Do_Commands ../src/core/a-lib.c:376 rebol#6 0x603d21 in rebdrw_gob_draw ../src/os/host-draw-api-agg.cpp:567 rebol#7 0x60c732 in process_gobs ../src/os/linux/host-compositor.c:520 rebol#8 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#9 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#10 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#11 0x60cb55 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#12 0x60f753 in rebcmp_compose ../src/os/linux/host-compositor.c:685 rebol#13 0x5e8299 in Draw_Window ../src/os/host-view.c:225 rebol#14 0x5e8682 in Show_Gob ../src/os/host-view.c:288 rebol#15 0x5e8b58 in RXD_Graphics ../src/os/host-view.c:346 rebol#16 0x45bf75 in Do_Command ../src/core/f-extension.c:456 rebol#17 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#18 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#19 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#20 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#21 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#22 0x42ea5c in Do_Function ../src/core/c-function.c:415 rebol#23 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#24 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#25 0x4883d6 in N_if ../src/core/n-control.c:632 rebol#26 0x42dd9c in Do_Native ../src/core/c-function.c:289 rebol#27 0x41395b in Do_Next ../src/core/c-do.c:886 rebol#28 0x414b73 in Do_Blk ../src/core/c-do.c:1016 rebol#29 0x496d2f in N_forever ../src/core/n-loop.c:532

Found by GCC Address Sanitizer: ================================================================= ==32465==ERROR: AddressSanitizer: alloc-dealloc-mismatch (malloc vs operator delete []) on 0x6030000add40 #0 0x7f012194676f in operator delete[](void*) (/usr/lib/libasan.so.1+0x5876f) #1 0x6c8785 in agg::agg_graphics::agg_reset() ../src/agg/agg_graphics.cpp:1562 rebol#2 0x6bc20c in agg::agg_graphics::~agg_graphics() ../src/agg/agg_graphics.cpp:96 rebol#3 0x66fb18 in rebdrw_gob_draw ../src/os/host-draw-api-agg.cpp:571 rebol#4 0x678500 in process_gobs ../src/os/linux/host-compositor.c:520 rebol#5 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#6 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#7 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#8 0x67b63f in rebcmp_compose ../src/os/linux/host-compositor.c:685 rebol#9 0x65158c in Draw_Window ../src/os/host-view.c:225 rebol#10 0x651b21 in Show_Gob ../src/os/host-view.c:288 rebol#11 0x6520ed in RXD_Graphics ../src/os/host-view.c:346 rebol#12 0x471ccd in Do_Command ../src/core/f-extension.c:456 rebol#13 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#14 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#15 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#16 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#17 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#18 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#19 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#20 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#21 0x4a6c9a in N_do ../src/core/n-control.c:524 rebol#22 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#23 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#24 0x41b643 in Try_Block ../src/core/c-do.c:1087 rebol#25 0x4a872e in N_try ../src/core/n-control.c:760 rebol#26 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#27 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#28 0x4168bd in Do_Args ../src/core/c-do.c:668 rebol#29 0x41a070 in Do_Next ../src/core/c-do.c:942 rebol#30 0x4168bd in Do_Args ../src/core/c-do.c:668 rebol#31 0x4190d4 in Do_Next ../src/core/c-do.c:879 rebol#32 0x4168bd in Do_Args ../src/core/c-do.c:668 rebol#33 0x4190d4 in Do_Next ../src/core/c-do.c:879 rebol#34 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#35 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#36 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#37 0x4168bd in Do_Args ../src/core/c-do.c:668 rebol#38 0x4190d4 in Do_Next ../src/core/c-do.c:879 rebol#39 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#40 0x4a6c9a in N_do ../src/core/n-control.c:524 rebol#41 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#42 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#43 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#44 0x4a732e in N_either ../src/core/n-control.c:598 rebol#45 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#46 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#47 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#48 0x4a732e in N_either ../src/core/n-control.c:598 rebol#49 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#50 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#51 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#52 0x4a732e in N_either ../src/core/n-control.c:598 rebol#53 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#54 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#55 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#56 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#57 0x42094d in Apply_Function ../src/core/c-do.c:1528 rebol#58 0x42116c in Do_Sys_Func ../src/core/c-do.c:1588 rebol#59 0x426d54 in Init_Mezz ../src/core/c-do.c:2320 rebol#60 0x4069c1 in RL_Start ../src/core/a-lib.c:193 rebol#61 0x5fea9d in main ../src/os/host-main.c:235 rebol#62 0x7f011fed27ff in __libc_start_main (/usr/lib/libc.so.6+0x207ff) rebol#63 0x405dd8 in _start (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x405dd8) 0x6030000add40 is located 0 bytes inside of 24-byte region [0x6030000add40,0x6030000add58) allocated by thread T0 here: #0 0x7f01219457a7 in malloc (/usr/lib/libasan.so.1+0x577a7) #1 0x606495 in OS_Make ../src/os/linux/host-lib.c:380 rebol#2 0x664b61 in RXD_Draw ../src/os/host-draw.c:438 rebol#3 0x472f24 in Do_Commands ../src/core/f-extension.c:585 rebol#4 0x4073a0 in RL_Do_Commands ../src/core/a-lib.c:402 rebol#5 0x66fadb in rebdrw_gob_draw ../src/os/host-draw-api-agg.cpp:568 rebol#6 0x678500 in process_gobs ../src/os/linux/host-compositor.c:520 rebol#7 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#8 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#9 0x6789b7 in process_gobs ../src/os/linux/host-compositor.c:559 rebol#10 0x67b63f in rebcmp_compose ../src/os/linux/host-compositor.c:685 rebol#11 0x65158c in Draw_Window ../src/os/host-view.c:225 rebol#12 0x651b21 in Show_Gob ../src/os/host-view.c:288 rebol#13 0x6520ed in RXD_Graphics ../src/os/host-view.c:346 rebol#14 0x471ccd in Do_Command ../src/core/f-extension.c:456 rebol#15 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#16 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#17 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#18 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#19 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#20 0x43f6c8 in Do_Function ../src/core/c-function.c:415 rebol#21 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#22 0x41aaed in Do_Blk ../src/core/c-do.c:1017 rebol#23 0x4a6c9a in N_do ../src/core/n-control.c:524 rebol#24 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#25 0x419332 in Do_Next ../src/core/c-do.c:886 rebol#26 0x41b643 in Try_Block ../src/core/c-do.c:1087 rebol#27 0x4a872e in N_try ../src/core/n-control.c:760 rebol#28 0x43e037 in Do_Native ../src/core/c-function.c:289 rebol#29 0x419332 in Do_Next ../src/core/c-do.c:886 SUMMARY: AddressSanitizer: alloc-dealloc-mismatch ??:0 operator delete[](void*) ==32465==HINT: if you don't care about these warnings you may set ASAN_OPTIONS=alloc_dealloc_mismatch=0 ==32465==ABORTING

index is unsigned, and could be zero, so 'index--' will underflow and round to 0xffffffff, and cause problem in a later call to Expand_Series I believe the idea of if ((REBINT)index > i) index--; is to move the index forward because gob being inserted were in PANE, and they can't be there twice (Detach_Gob will remove them from the current gob). So if they were not there, "index" shouldn't be changed. This fixes a crash in the following script: REBOL [] foo: make block! [] for i 0 15 1 [ txt: #"a" + i append foo make gob! reduce/no-set [text: to string! txt] ] g: make gob! [] append g foo g/pane: next g/pane With this stack trace: zsx@touchsmart-arch:~/work/r3.git/make$ R3_ALWAYS_MALLOC=1 ./r3-view-linux test-insert-gob-crash.r ================================================================= ==24248==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x60d00000c8a8 at pc 0x522243 bp 0x7fff91ba7a60 sp 0x7fff91ba7a50 WRITE of size 8 at 0x60d00000c8a8 thread T0 #0 0x522242 in Insert_Gobs ../src/core/t-gob.c:230 #1 0x5242d6 in Set_GOB_Var ../src/core/t-gob.c:421 rebol#2 0x5278ee in PD_Gob ../src/core/t-gob.c:713 rebol#3 0x414cda in Next_Path ../src/core/c-do.c:399 rebol#4 0x415c8c in Do_Path ../src/core/c-do.c:463 rebol#5 0x41a018 in Do_Next ../src/core/c-do.c:928 rebol#6 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#7 0x4a6eca in N_do ../src/core/n-control.c:524 rebol#8 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#9 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#10 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#11 0x4a755e in N_either ../src/core/n-control.c:598 rebol#12 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#13 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#14 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#15 0x4a755e in N_either ../src/core/n-control.c:598 rebol#16 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#17 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#18 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#19 0x4a755e in N_either ../src/core/n-control.c:598 rebol#20 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#21 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#22 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#23 0x43f8f8 in Do_Function ../src/core/c-function.c:415 rebol#24 0x420b7d in Apply_Function ../src/core/c-do.c:1528 rebol#25 0x42139c in Do_Sys_Func ../src/core/c-do.c:1588 rebol#26 0x426f84 in Init_Mezz ../src/core/c-do.c:2320 rebol#27 0x406bf1 in RL_Start ../src/core/a-lib.c:193 rebol#28 0x5fecee in main ../src/os/host-main.c:235 rebol#29 0x7facd0bf67ff in __libc_start_main (/usr/lib/libc.so.6+0x207ff) rebol#30 0x406008 in _start (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x406008) 0x60d00000c8a8 is located 0 bytes to the right of 136-byte region [0x60d00000c820,0x60d00000c8a8) allocated by thread T0 here: #0 0x7facd26567a7 in malloc (/usr/lib/libasan.so.1+0x577a7) #1 0x4999a7 in Make_Mem ../src/core/m-pools.c:125 rebol#2 0x49b188 in Make_Series ../src/core/m-pools.c:413 rebol#3 0x521929 in Insert_Gobs ../src/core/t-gob.c:208 rebol#4 0x529717 in T_Gob ../src/core/t-gob.c:835 rebol#5 0x43eb86 in Do_Act ../src/core/c-function.c:338 rebol#6 0x43f82a in Do_Action ../src/core/c-function.c:396 rebol#7 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#8 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#9 0x4a6eca in N_do ../src/core/n-control.c:524 rebol#10 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#11 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#12 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#13 0x4a755e in N_either ../src/core/n-control.c:598 rebol#14 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#15 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#16 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#17 0x4a755e in N_either ../src/core/n-control.c:598 rebol#18 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#19 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#20 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#21 0x4a755e in N_either ../src/core/n-control.c:598 rebol#22 0x43e267 in Do_Native ../src/core/c-function.c:289 rebol#23 0x419562 in Do_Next ../src/core/c-do.c:886 rebol#24 0x41ad1d in Do_Blk ../src/core/c-do.c:1017 rebol#25 0x43f8f8 in Do_Function ../src/core/c-function.c:415 rebol#26 0x420b7d in Apply_Function ../src/core/c-do.c:1528 rebol#27 0x42139c in Do_Sys_Func ../src/core/c-do.c:1588 rebol#28 0x426f84 in Init_Mezz ../src/core/c-do.c:2320 rebol#29 0x406bf1 in RL_Start ../src/core/a-lib.c:193 SUMMARY: AddressSanitizer: heap-buffer-overflow ../src/core/t-gob.c:230 Insert_Gobs Shadow bytes around the buggy address: 0x0c1a7fff98c0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c1a7fff98d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c1a7fff98e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c1a7fff98f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c1a7fff9900: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 =>0x0c1a7fff9910: 00 00 00 00 00[fa]fa fa fa fa fa fa fa fa 00 00 0x0c1a7fff9920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fa 0x0c1a7fff9930: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c1a7fff9940: 00 00 00 00 00 00 00 00 00 fa fa fa fa fa fa fa 0x0c1a7fff9950: fa fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c1a7fff9960: 00 00 00 00 fa fa fa fa fa fa fa fa fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Contiguous container OOB:fc ASan internal: fe ==24248==ABORTING

reported by address sanitizer with manual poisonation: ================================================================= ==11513==ERROR: AddressSanitizer: use-after-poison on address 0x7efe281542c0 at pc 0x00000071038f bp 0x7ffdc9de9330 sp 0x7ffdc9de9328 READ of size 4 at 0x7efe281542c0 thread T0 #0 0x71038e in Mark_Series /home/zsx/stuffs/work/r3.git/make/../src/core/m-gc.c:501:6 #1 0x70ea8b in Recycle /home/zsx/stuffs/work/r3.git/make/../src/core/m-gc.c:744:4 rebol#2 0x7bbde6 in N_recycle /home/zsx/stuffs/work/r3.git/make/../src/core/n-system.c:99:10 rebol#3 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#4 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#5 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#6 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#7 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#8 0x566f3d in Do_Block_Value_Throw /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1049:11 rebol#9 0xb0b6d9 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:830:4 rebol#10 0xb0e7f7 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 rebol#11 0xb07b10 in Parse_Series /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:96:9 rebol#12 0xb06b65 in N_parse /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:1269:7 rebol#13 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#14 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#15 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#16 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#17 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#18 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#19 0x745e54 in N_case /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:348:10 rebol#20 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#21 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#22 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#23 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#24 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#25 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#26 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#27 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#28 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#29 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#30 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#31 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#32 0x749b0b in N_do /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:524:8 rebol#33 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#34 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#35 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#36 0x74abca in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#37 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#38 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#39 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#40 0x74abca in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#41 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#42 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#43 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#44 0x74abca in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#45 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#46 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#47 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#48 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#49 0x5758b0 in Apply_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1528:33 rebol#50 0x576ec0 in Do_Sys_Func /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1588:10 rebol#51 0x582548 in Init_Mezz /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:2320:9 rebol#52 0x52e62f in RL_Start /home/zsx/stuffs/work/r3.git/make/../src/core/a-lib.c:193:9 rebol#53 0xbb6c93 in main /home/zsx/stuffs/work/r3.git/make/../src/os/host-main.c:235:6 rebol#54 0x7efe2bfcb7ff in __libc_start_main (/usr/lib/libc.so.6+0x207ff) rebol#55 0x486498 in _start (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x486498) 0x7efe281542c0 is located 96960 bytes inside of 131088-byte region [0x7efe2813c800,0x7efe2815c810) allocated by thread T0 here: #0 0x50d462 in __interceptor_malloc (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x50d462) #1 0x721a85 in Make_Mem /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:127:14 rebol#2 0x723acd in Fill_Pool /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:235:19 rebol#3 0x7233af in Make_Node /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:280:20 rebol#4 0x725f8a in Make_Series /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:391:21 rebol#5 0x738823 in Copy_Series /home/zsx/stuffs/work/r3.git/make/../src/core/m-series.c:261:19 rebol#6 0x5f93a6 in Copy_Deep_Values /home/zsx/stuffs/work/r3.git/make/../src/core/f-blocks.c:131:22 rebol#7 0x5f98cf in Copy_Deep_Values /home/zsx/stuffs/work/r3.git/make/../src/core/f-blocks.c:136:6 rebol#8 0x5fa3ed in Copy_Block_Values /home/zsx/stuffs/work/r3.git/make/../src/core/f-blocks.c:159:18 rebol#9 0x89efc2 in T_Block /home/zsx/stuffs/work/r3.git/make/../src/core/t-block.c:796:23 rebol#10 0x5c458f in Do_Act /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:338:8 rebol#11 0x5c5927 in Do_Action /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:396:2 rebol#12 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#13 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#14 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#15 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#16 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#17 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#18 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#19 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#20 0x749b0b in N_do /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:524:8 rebol#21 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#22 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#23 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#24 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#25 0x5758b0 in Apply_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1528:33 rebol#26 0x576ec0 in Do_Sys_Func /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1588:10 rebol#27 0x5a37d0 in Make_Module /home/zsx/stuffs/work/r3.git/make/../src/core/c-frame.c:585:10 rebol#28 0x9510d5 in T_Object /home/zsx/stuffs/work/r3.git/make/../src/core/t-object.c:308:16 rebol#29 0x8ac4eb in T_Datatype /home/zsx/stuffs/work/r3.git/make/../src/core/t-datatype.c:92:20 SUMMARY: AddressSanitizer: use-after-poison /home/zsx/stuffs/work/r3.git/make/../src/core/m-gc.c:501 Mark_Series Shadow bytes around the buggy address: 0x0fe045022800: f7 f7 00 00 00 00 00 00 00 00 f7 f7 f7 f7 00 00 0x0fe045022810: 00 00 00 00 00 00 f7 f7 f7 f7 00 00 00 00 00 00 0x0fe045022820: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0fe045022830: 00 00 f7 f7 f7 f7 00 00 00 00 00 00 00 00 f7 f7 0x0fe045022840: f7 f7 00 00 00 00 00 00 00 00 f7 f7 f7 f7 00 00 =>0x0fe045022850: 00 00 00 00 00 00 f7 f7[f7]f7 00 00 00 00 00 00 0x0fe045022860: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0fe045022870: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0fe045022880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0fe045022890: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0fe0450228a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==11513==ABORTING

The length of the VAL_SERIES(value) has been set correctly by Append_UTF8, and it could be smaller than "len", because UTF8 is a multi-byte encoding, thus passing "len" to Deline_Uni could cause out-of-bound memory access. Fixes CC#2169 The following code REBOL[] t: <ēee> causes: ==13053==ERROR: AddressSanitizer: use-after-poison on address 0x61d00001a5f8 at pc 0x000000853d50 bp 0x7ffd2a31a1b0 sp 0x7ffd2a31a1a8 WRITE of size 2 at 0x61d00001a5f8 thread T0 #0 0x853d4f in Deline_Uni /home/zsx/stuffs/work/r3.git/make/../src/core/s-ops.c:426:2 #1 0x7064d4 in Scan_Any /home/zsx/stuffs/work/r3.git/make/../src/core/l-types.c:846:7 rebol#2 0x6dca3c in Scan_Block /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1421:4 rebol#3 0x6d9f92 in Scan_Block /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1301:12 rebol#4 0x6df0e6 in Scan_Code /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1550:9 rebol#5 0x6df462 in Scan_Source /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1570:9 rebol#6 0x896105 in Make_Block_Type /home/zsx/stuffs/work/r3.git/make/../src/core/t-block.c:306:9 rebol#7 0x89af62 in T_Block /home/zsx/stuffs/work/r3.git/make/../src/core/t-block.c:624:3 rebol#8 0x8ac80b in T_Datatype /home/zsx/stuffs/work/r3.git/make/../src/core/t-datatype.c:92:20 rebol#9 0x5c458f in Do_Act /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:338:8 rebol#10 0x5c5927 in Do_Action /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:396:2 rebol#11 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#12 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#13 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#14 0x746174 in N_case /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:348:10 rebol#15 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#16 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#17 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#18 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#19 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#20 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#21 0x568295 in Try_Block /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1087:11 rebol#22 0x7506ac in N_try /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:760:6 rebol#23 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#24 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#25 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#26 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#27 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#28 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#29 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#30 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#31 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#32 0x566f3d in Do_Block_Value_Throw /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1049:11 rebol#33 0xb0b9f9 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:830:4 rebol#34 0xb0eb17 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 rebol#35 0xb07e30 in Parse_Series /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:96:9 rebol#36 0xb06e85 in N_parse /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:1269:7 rebol#37 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#38 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#39 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#40 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#41 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#42 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#43 0x746174 in N_case /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:348:10 rebol#44 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#45 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#46 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#47 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#48 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#49 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#50 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#51 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#52 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#53 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#54 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#55 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#56 0x749e2b in N_do /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:524:8 rebol#57 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#58 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#59 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#60 0x74aeea in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#61 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#62 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#63 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#64 0x74aeea in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#65 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#66 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#67 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#68 0x74aeea in N_either /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:598:3 rebol#69 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#70 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#71 0x5576e1 in Do_Blk /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1017:11 rebol#72 0x5c5c4f in Do_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:415:11 rebol#73 0x5758b0 in Apply_Function /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1528:33 rebol#74 0x576ec0 in Do_Sys_Func /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1588:10 rebol#75 0x582548 in Init_Mezz /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:2320:9 rebol#76 0x52e62f in RL_Start /home/zsx/stuffs/work/r3.git/make/../src/core/a-lib.c:193:9 rebol#77 0xbb6fb3 in main /home/zsx/stuffs/work/r3.git/make/../src/os/host-main.c:235:6 rebol#78 0x7fd1c04ef7ff in __libc_start_main (/usr/lib/libc.so.6+0x207ff) rebol#79 0x486498 in _start (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x486498) 0x61d00001a5f8 is located 376 bytes inside of 2064-byte region [0x61d00001a480,0x61d00001ac90) allocated by thread T0 here: #0 0x50d462 in __interceptor_malloc (/home/zsx/stuffs/work/r3.git/make/r3-view-linux+0x50d462) #1 0x721a85 in Make_Mem /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:132:14 rebol#2 0x723bed in Fill_Pool /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:240:19 rebol#3 0x7233c2 in Make_Node /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:295:20 rebol#4 0x7267f3 in Make_Series /home/zsx/stuffs/work/r3.git/make/../src/core/m-pools.c:419:10 rebol#5 0x818d71 in Copy_String /home/zsx/stuffs/work/r3.git/make/../src/core/s-make.c:337:8 rebol#6 0x6dc386 in Scan_Block /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1388:22 rebol#7 0x6df0e6 in Scan_Code /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1550:9 rebol#8 0x6e1f81 in N_transcode /home/zsx/stuffs/work/r3.git/make/../src/core/l-scan.c:1630:8 rebol#9 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#10 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#11 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#12 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#13 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#14 0x56110f in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:942:13 rebol#15 0x568295 in Try_Block /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1087:11 rebol#16 0x7506ac in N_try /home/zsx/stuffs/work/r3.git/make/../src/core/n-control.c:760:6 rebol#17 0x5c379d in Do_Native /home/zsx/stuffs/work/r3.git/make/../src/core/c-function.c:289:6 rebol#18 0x55f3d7 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:886:18 rebol#19 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#20 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#21 0x56360b in Do_Args /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:668:12 rebol#22 0x55edc9 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:879:11 rebol#23 0x55e447 in Do_Next /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:860:11 rebol#24 0x566f3d in Do_Block_Value_Throw /home/zsx/stuffs/work/r3.git/make/../src/core/c-do.c:1049:11 rebol#25 0xb0b9f9 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:830:4 rebol#26 0xb0eb17 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 rebol#27 0xb0eb17 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 rebol#28 0xb0eb17 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 rebol#29 0xb0eb17 in Parse_Rules_Loop /home/zsx/stuffs/work/r3.git/make/../src/core/u-parse.c:927:9 SUMMARY: AddressSanitizer: use-after-poison /home/zsx/stuffs/work/r3.git/make/../src/core/s-ops.c:426 Deline_Uni Shadow bytes around the buggy address: 0x0c3a7fffb460: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffb470: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffb480: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c3a7fffb490: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x0c3a7fffb4a0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 =>0x0c3a7fffb4b0: f7 f7 f7 f7 f7 f7 f7 f7 f7 00 00 00 f7 00 00[f7] 0x0c3a7fffb4c0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x0c3a7fffb4d0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x0c3a7fffb4e0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x0c3a7fffb4f0: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 0x0c3a7fffb500: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Heap right redzone: fb Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack partial redzone: f4 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==13053==ABORTING

Instead of a child window, which will be clipped by its parent window. See atronix bug rebol#3

Jussi Hagman added 3 commits December 13, 2012 17:59

At least on a current OS X, (llvm-)gcc defaults to 64-bit, which brea…

177e47a

…ks Rebol struct alignment. Force 32-bit build and link.

Fix clean

306ebbe

- clean should remove objs directory, otherwise subsequent builds will fail. - use -f to suppress warning for missing libr3.so

Fixed whitespace.

61c58cc

carls added a commit that referenced this pull request Dec 13, 2012

Merge pull request #3 from juhagman/b-osx-build-fix

6e9ef43

OS X build fix

carls merged commit 6e9ef43 into rebol:master Dec 13, 2012

zsx referenced this pull request in zsx/r3 Feb 16, 2014

[Linux] Implement pop windows with over_redirect

20003b1

Instead of a child window, which will be clipped by its parent window. See atronix bug #3

zsx referenced this pull request in zsx/r3 Feb 27, 2014

[Linux] Implement pop windows with over_redirect

ad6ebb8

Instead of a child window, which will be clipped by its parent window. See atronix bug #3

earl pushed a commit to earl/r3 that referenced this pull request Jul 19, 2015

[Linux] Implement pop windows with over_redirect

c2eb05e

Instead of a child window, which will be clipped by its parent window. See atronix bug rebol#3

earl pushed a commit to earl/r3 that referenced this pull request Jul 20, 2015

[Linux] Implement pop windows with over_redirect

ebf68e7

Instead of a child window, which will be clipped by its parent window. See atronix bug rebol#3

earl pushed a commit to earl/r3 that referenced this pull request Jul 20, 2015

[Linux] Implement pop windows with over_redirect

43726a4

Instead of a child window, which will be clipped by its parent window. See atronix bug rebol#3

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OS X build fix #3

OS X build fix #3

juhagman commented Dec 13, 2012

carls commented Dec 13, 2012

OS X build fix #3

OS X build fix #3

Conversation

juhagman commented Dec 13, 2012

carls commented Dec 13, 2012