ASAN error in testsuite

Hi Paolo,

maybe you could give me a hand with this. I was chasing a problem
of sporadic test failures and tried ASAN once more and the only
failure right now is the compiler test.

Does any of this ring a bell? I will probably start having a look
tomorrow.

holger




 Execution begins...
 'abc'
-'def'
-returned value is ReadStream new "<0>"
+=================================================================
+==78594==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x603000012aba at pc 0x00010748fa5b bp 0x7fff58b80790 sp 0x7fff58b7ff50
+READ of size 12 at 0x603000012aba thread T0
+    #0 0x10748fa5a in __asan_memcpy (libclang_rt.asan_osx_dynamic.dylib+0x41a5a)
+    #1 0x1070e4c64 in _gst_counted_string_new dict.c:1976
+    #2 0x1071ad038 in _gst_get_source_string input.c:558
+    #3 0x1070b62a5 in _gst_make_new_method comp.c:2685
+    #4 0x1070bd7ca in _gst_compile_method comp.c:831
+    #5 0x1070b8325 in _gst_execute_statements comp.c:558
+    #6 0x107085162 in execute_doit gst-parse.c:593
+    #7 0x107082859 in parse_doit gst-parse.c:635
+    #8 0x107081ff5 in parse_chunks gst-parse.c:475
+    #9 0x107081bc9 in _gst_parse_chunks gst-parse.c:449
+    #10 0x1070902c0 in _gst_parse_stream lex.c:1209
+    #11 0x1072a6895 in parse_stream_with_protection interp.c:2825
+    #12 0x10721d485 in VMpr_Stream_fileInLine prims.def:5490
+    #13 0x10722711a in execute_primitive_operation interp.c:2738
+    #14 0x107226035 in _gst_send_message_internal .interp-bc.inl:276
+    #15 0x107275109 in _gst_interpret vm.def:645
+    #16 0x107297920 in _gst_nvmsg_send interp.c:2318
+    #17 0x1070b887d in _gst_execute_statements comp.c:586
+    #18 0x107085162 in execute_doit gst-parse.c:593
+    #19 0x107089283 in parse_eval_definition gst-parse.c:757
+    #20 0x107083c9e in parse_scoped_definition gst-parse.c:669
+    #21 0x1070827ce in parse_doit gst-parse.c:625
+    #22 0x107081ff5 in parse_chunks gst-parse.c:475
+    #23 0x107081bc9 in _gst_parse_chunks gst-parse.c:449
+    #24 0x1070902c0 in _gst_parse_stream lex.c:1209
+    #25 0x1071b1b39 in _gst_process_file input.c:863
+    #26 0x10707d36a in gst_process_file gstpub.c:167
+    #27 0x1070711ce in main main.c:402
+    #28 0x7ffface09254 in start (libdyld.dylib+0x5254)
+
+0x603000012aba is located 6 bytes to the left of 28-byte region [0x603000012ac0,0x603000012adc)
+allocated by thread T0 here:
+    #0 0x107498ff7 in wrap_realloc (libclang_rt.asan_osx_dynamic.dylib+0x4aff7)
+    #1 0x1071dcfcc in xrealloc alloc.c:773
+    #2 0x1071abf6e in refill_stream input.c:379
+    #3 0x1071b0c3b in my_getc input.c:423
+    #4 0x1071b0594 in _gst_next_char input.c:769
+    #5 0x10708f8ed in _gst_yylex lex.c:387
+    #6 0x107082200 in lex_lookahead gst-parse.c:211
+    #7 0x107080d76 in lex_init gst-parse.c:200
+    #8 0x107081b18 in _gst_parse_chunks gst-parse.c:442
+    #9 0x1070902c0 in _gst_parse_stream lex.c:1209
+    #10 0x1072a6895 in parse_stream_with_protection interp.c:2825
+    #11 0x10721d485 in VMpr_Stream_fileInLine prims.def:5490
+    #12 0x10722711a in execute_primitive_operation interp.c:2738
+    #13 0x107226035 in _gst_send_message_internal .interp-bc.inl:276
+    #14 0x107275109 in _gst_interpret vm.def:645
+    #15 0x107297920 in _gst_nvmsg_send interp.c:2318
+    #16 0x1070b887d in _gst_execute_statements comp.c:586
+    #17 0x107085162 in execute_doit gst-parse.c:593
+    #18 0x107089283 in parse_eval_definition gst-parse.c:757
+    #19 0x107083c9e in parse_scoped_definition gst-parse.c:669
+    #20 0x1070827ce in parse_doit gst-parse.c:625
+    #21 0x107081ff5 in parse_chunks gst-parse.c:475
+    #22 0x107081bc9 in _gst_parse_chunks gst-parse.c:449
+    #23 0x1070902c0 in _gst_parse_stream lex.c:1209
+    #24 0x1071b1b39 in _gst_process_file input.c:863
+    #25 0x10707d36a in gst_process_file gstpub.c:167
+    #26 0x1070711ce in main main.c:402
+    #27 0x7ffface09254 in start (libdyld.dylib+0x5254)
+
+SUMMARY: AddressSanitizer: heap-buffer-overflow (libclang_rt.asan_osx_dynamic.dylib+0x41a5a) in __asan_memcpy
+Shadow bytes around the buggy address:
+  0x1c0600002500: 00 fa fa fa fd fd fd fd fa fa fd fd fd fd fa fa
+  0x1c0600002510: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
+  0x1c0600002520: fa fa fd fd fd fd fa fa fd fd fd fd fa fa fd fd
+  0x1c0600002530: fd fa fa fa fd fd fd fd fa fa fd fd fd fd fa fa
+  0x1c0600002540: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
+=>0x1c0600002550: fa fa fd fd fd fd fa[fa]00 00 00 04 fa fa fd fd
+  0x1c0600002560: fd fd fa fa fd fd fd fd fa fa fd fd fd fa fa fa
+  0x1c0600002570: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
+  0x1c0600002580: fa fa fd fd fd fd fa fa fd fd fd fd fa fa fd fd
+  0x1c0600002590: fd fd fa fa fd fd fd fd fa fa 00 00 03 fa fa fa
+  0x1c06000025a0: fd fd fd fd fa fa fd fd fd fd fa fa fd fd fd fd
+Shadow byte legend (one shadow byte represents 8 application bytes):
+  Addressable:           00
+  Partially addressable: 01 02 03 04 05 06 07
+  Heap left redzone:       fa
+  Heap right redzone:      fb
+  Freed heap region:       fd
+  Stack left redzone:      f1
+  Stack mid redzone:       f2
+  Stack right redzone:     f3
+  Stack partial redzone:   f4
+  Stack after return:      f5
+  Stack use after scope:   f8
+  Global redzone:          f9
+  Global init order:       f6
+  Poisoned by user:        f7
+  Container overflow:      fc
+  Array cookie:            ac
+  Intra object redzone:    bb
+  ASan internal:           fe
+  Left alloca redzone:     ca
+  Right alloca redzone:    cb