asan-ubsan-zif-64-61fc9d.txt

gistfile1.txt

ASAN after running `=x (bex (bex 38))`

=================================================================
==29975==ERROR: AddressSanitizer: use-after-poison on address 0x72800cdb0000 at pc 0x000100ba6d70 bp 0x00016f337650 sp 0x00016f337648
WRITE of size 8 at 0x72800cdb0000 thread T0
    #0 0x100ba6d6c in _alloc_pages palloc.c:322
    #1 0x100b92b78 in _imalloc palloc.c:554
    #2 0x100b92b24 in u3a_walloc allocate.c:238
    #3 0x100bad088 in _ca_take_atom allocate.c:507
    #4 0x100baca6c in _ca_take_next_north allocate.c:638
    #5 0x100b95c34 in _ca_take_north allocate.c:740
    #6 0x100b95988 in u3a_take allocate.c:807
    #7 0x100cb1444 in u3m_love manage.c:1190
    #8 0x100cb4914 in u3m_soft_run manage.c:1571
    #9 0x100cbe8bc in u3n_nock_et nock.c:3197
    #10 0x100c4f81c in u3we_mink mink.c:23
    #11 0x100bc8278 in _cj_kick_z jets.c:874
    #12 0x100bcd7e0 in _cj_site_kick_hot jets.c:1548
    #13 0x100bca948 in _cj_site_kick jets.c:1600
    #14 0x100bca81c in u3j_site_kick jets.c:1650
    #15 0x100cce110 in _n_kick nock.c:2054
    #16 0x100cca6dc in _n_burn nock.c:2466
    #17 0x100cbca1c in _n_burn_out nock.c:2840
    #18 0x100cbca94 in _n_burn_on nock.c:2863
    #19 0x100cbca48 in u3n_nock_on nock.c:2877
    #20 0x100cb4908 in u3m_soft_run manage.c:1552
    #21 0x100cbe8bc in u3n_nock_et nock.c:3197
    #22 0x100c4f81c in u3we_mink mink.c:23
    #23 0x100bc8278 in _cj_kick_z jets.c:874
    #24 0x100bcd7e0 in _cj_site_kick_hot jets.c:1548
    #25 0x100bca948 in _cj_site_kick jets.c:1600
    #26 0x100bca81c in u3j_site_kick jets.c:1650
    #27 0x100cce110 in _n_kick nock.c:2054
    #28 0x100cca6dc in _n_burn nock.c:2466
    #29 0x100cbca1c in _n_burn_out nock.c:2840
    #30 0x100cbca94 in _n_burn_on nock.c:2863
    #31 0x100cbca48 in u3n_nock_on nock.c:2877
    #32 0x100bc80e8 in _cj_sink jets.c:1245
    #33 0x100bcc428 in u3j_kink jets.c:1696
    #34 0x100cbe62c in u3n_kick_on nock.c:3168
    #35 0x100cbe880 in u3n_slam_on nock.c:3189
    #36 0x100cf5a58 in u3v_poke vortex.c:276
    #37 0x100cb21e4 in u3m_soft_top manage.c:1325
    #38 0x100cb5594 in u3m_soft manage.c:1731
    #39 0x100cf5be0 in u3v_poke_sure vortex.c:291
    #40 0x100b7424c in _mars_poke mars.c:516
    #41 0x100b6c214 in _mars_work mars.c:609
    #42 0x100b6b974 in u3_mars_kick mars.c:908
    #43 0x100b84b14 in _newt_meat_poke newt.c:70
    #44 0x100b839f4 in _newt_read_cb newt.c:197
    #45 0x100de6abc in uv__read stream.c:1148
    #46 0x100de3228 in uv__stream_io stream.c:1208
    #47 0x100dee8ec in uv__io_poll kqueue.c:423
    #48 0x100dd02f0 in uv_run core.c:460
    #49 0x10176a4bc in _cw_work main.c:3038
    #50 0x101759a8c in _cw_utils main.c:3109
    #51 0x101757900 in main main.c:3134
    #52 0x18cdcab94 in start+0x17b8 (dyld:arm64+0xfffffffffff3ab94)

Address 0x72800cdb0000 is a wild pointer inside of access range of size 0x000000000008.
SUMMARY: AddressSanitizer: use-after-poison palloc.c:322 in _alloc_pages
Shadow bytes around the buggy address:
  0x72800cdafd80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x72800cdafe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x72800cdafe80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x72800cdaff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x72800cdaff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x72800cdb0000:[f7]f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x72800cdb0080: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x72800cdb0100: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x72800cdb0180: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x72800cdb0200: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
  0x72800cdb0280: f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7 f7
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==29975==ABORTING


UBSAN after running `=x (bex (bex 38))`

/Users/matt/src/urbit/vere/pkg/vere/db/lmdb.c:591:8: runtime error: load of misaligned address 0x00700001b874 for type 'c3_d' (aka 'unsigned long long'), which requires 8 byte alignment
0x00700001b874: note: pointer points here
  00 00 08 00 fb 01 00 00  00 00 00 00 24 3e 53 7a  01 08 00 00 00 00 00 00  40 2d 84 94 bc b7 69 00
              ^ 
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /Users/matt/src/urbit/vere/pkg/vere/db/lmdb.c:591:8 
/Users/matt/src/urbit/vere/pkg/vere/newt.c:70:17: runtime error: call to function u3_mars_kick through pointer to incorrect function type 'unsigned char (*)(void *, unsigned long long, unsigned char *)'
mars.c:895: note: u3_mars_kick defined here
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /Users/matt/src/urbit/vere/pkg/vere/newt.c:70:17 
/Users/matt/src/urbit/vere/pkg/noun/palloc.c:225:3: runtime error: addition of unsigned offset to 0x028000000000 overflowed to 0x02787ec60000
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /Users/matt/src/urbit/vere/pkg/noun/palloc.c:225:3