Skip to content
This repository has been archived by the owner on Oct 3, 2021. It is now read-only.

ntdrivers/parport.i.cil-2 is not memory safe #1269

Closed
tautschnig opened this issue Dec 7, 2020 · 0 comments · Fixed by #1271
Closed

ntdrivers/parport.i.cil-2 is not memory safe #1269

tautschnig opened this issue Dec 7, 2020 · 0 comments · Fixed by #1271
Labels
C Task in language C issue with benchmark

Comments

@tautschnig
Copy link
Contributor

The task eventually tries to access the memory pointed to by irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList. This member is never initialised, and could thus point anywhere.

@tautschnig tautschnig added issue with benchmark C Task in language C labels Dec 7, 2020
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 7, 2020
The task eventually tries to access the memory pointed to by
`irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList`.
This member was never initialised, and could thus point anywhere.

Fixes: sosy-lab#1269
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 7, 2020
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 7, 2020
The task eventually tries to access the memory pointed to by
`irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList`.
This member was never initialised, and could thus point anywhere.
Equally, `devobj.DeviceExtension` is used, but was not initialised.

Fixes: sosy-lab#1269
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 8, 2020
The task eventually tries to access the memory pointed to by
`irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList`.
This member was never initialised, and could thus point anywhere.
Equally, `devobj.DeviceExtension` is used, but was not initialised.

Fixes: sosy-lab#1269
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 8, 2020
Missing or non-deterministic initialisation caused several memory-safety
errors. For example, the task eventually tries to access the memory
pointed to by
`irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList`.
This member was never initialised, and could thus point anywhere.
Equally, `devobj.DeviceExtension` is used, but was not initialised.

Fixes: sosy-lab#1269
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 13, 2020
Missing or non-deterministic initialisation caused several memory-safety
errors. For example, the task eventually tries to access the memory
pointed to by
`irp.Tail.Overlay.__annonCompField17.__annonCompField16.CurrentStackLocation->Parameters.FilterResourceRequirements.IoResourceRequirementList`.
This member was never initialised, and could thus point anywhere.
Equally, `devobj.DeviceExtension` is used, but was not initialised.

Fixes: sosy-lab#1269
tautschnig added a commit to tautschnig/sv-benchmarks that referenced this issue Dec 19, 2020
Non-deterministically picking values from fixed-size arrays must do so
within the bounds of the respective array.

Fixes: sosy-lab#1269
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
C Task in language C issue with benchmark
Development

Successfully merging a pull request may close this issue.

1 participant