Re: NULL pointer dereference in boundary_print

Momoko Shiraishi <[email protected]> writes:

> ### poc file
> ```yacc
> %poc p[
>
> %%
> ```
> ## Output
> ### ASanLog
>
> ```
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> =3D=3D8983=3D=3DERROR: AddressSanitizer: SEGV on unknown address 0x000000=
000000 (pc 0x575f010633b5 bp 0x7ffc35704cf0 sp 0x7ffc35704ba0 T0)
> =3D=3D8983=3D=3DThe signal is caused by a READ memory access.
> =3D=3D8983=3D=3DHint: address points to the zero page.
>     #0 0x575f010633b5 in quotearg_buffer_restyled lib/quotearg.c:393
>     #1 0x575f01064175 in quotearg_n_options lib/quotearg.c:899
>     #2 0x575f010645f1 in quotearg_n_style lib/quotearg.c:950
>     #3 0x575f00f89bd6 in boundary_print src/location.c:149
>     #4 0x575f00f89dcd in location_print src/location.c:164
>     #5 0x575f00fc6b35 in yy_symbol_print src/parse-gram.c:1390
>     #6 0x575f00fcfcf3 in gram_parse src/parse-gram.c:3099
>     #7 0x575f00fe9753 in reader src/reader.c:766
>     #8 0x575f00f92b6a in main src/main.c:118
>     #9 0x702b6e1c0d8f in __libc_start_call_main ../sysdeps/nptl/libc_star=
t_call_main.h:58
>     #10 0x702b6e1c0e3f in __libc_start_main_impl ../csu/libc-start.c:392
>     #11 0x575f00f47594 in _start (/usr/local/bin/bison+0x36594)
>
> AddressSanitizer can not provide additional info.
> SUMMARY: AddressSanitizer: SEGV lib/quotearg.c:393 in quotearg_buffer_res=
tyled
> =3D=3D8983=3D=3DABORTING
> ```

This doesn't occur for me from the git repository or bison-3.8.2. I see
the following, using your './configure' invocation:


    $ ./src/bison ~/input=20
    /home/collin/input:1.1-4: error: invalid directive: =E2=80=98%poc=E2=80=
=99
        1 | %poc p[
          | ^~~~
    /home/collin/input:3.1-2: error: invalid characters in bracketed name: =
=E2=80=98%%=E2=80=99
        3 | %%
          | ^~
    /home/collin/input:1.7-4.0: error: missing =E2=80=98]=E2=80=99 at end o=
f file
        1 | %poc p[
          |       ^
    /home/collin/input:4: error: invalid character: =E2=80=98]=E2=80=99

Is this another AI report like the previous ones [1][2]? The formatting
looks suspiciously similar...

Collin

[1] https://lists.gnu.org/archive/html/bug-bison/2025-07/msg00009.html
[2] https://lists.gnu.org/archive/html/bug-bison/2025-07/msg00008.html