[Mono-bugs] [Bug 560330] [verifier] abort in mono_metadata_token_from_dor on bad assembly

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=560330

http://bugzilla.novell.com/show_bug.cgi?id=560330#c6


--- Comment #6 from Sebastien Pouliot <spouliot at novell.com> 2010-07-19 19:17:41 UTC ---
Created an attachment (id=376921)
 --> (http://bugzilla.novell.com/attachment.cgi?id=376921)
assembly causing the abort

more recent test case on x86 (openSUSE 11.3)

gdb --args pedump --verify all bin/System.sigabrt.11362.dll

* Assertion: should not be reached at metadata.c:3737


Program received signal SIGABRT, Aborted.
0xffffe424 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe424 in __kernel_vsyscall ()
#1  0xb7e2d7ff in raise () from /lib/libc.so.6
#2  0xb7e2f140 in abort () from /lib/libc.so.6
#3  0x0818f08a in monoeg_g_logv (log_domain=0x0, log_level=G_LOG_LEVEL_ERROR,
format=0x81a247c "* Assertion: should not be reached at %s:%d\n", 
    args=0xbfffe744 "\342!\032\b\231\016") at goutput.c:134
#4  0x0818f109 in monoeg_assertion_message (format=0x81a247c "* Assertion:
should not be reached at %s:%d\n") at goutput.c:154
#5  0x0809edc6 in mono_metadata_token_from_dor (dor_index=3) at metadata.c:3737
#6  0x0809a97c in mono_metadata_parse_typedef_or_ref (m=0x829c998, 
    ptr=0xb7b2f5df "\034\022\200\354\022\201e\034\a \002\034\034\022\203\221\r
\004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004",
rptr=0xbfffe804) at metadata.c:1219
#7  0x0809a9ed in mono_metadata_parse_custom_mod (m=0x829c998, dest=0xbfffe7bc, 
    ptr=0xb7b2f5dd " \003\034\022\200\354\022\201e\034\a
\002\034\034\022\203\221\r \004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004",
rptr=0xbfffe804) at metadata.c:1241
#8  0x0809b0f5 in mono_metadata_parse_type_internal (m=0x829c998,
container=0x0, mode=MONO_PARSE_PARAM, opt_attrs=0, transient=0, 
    ptr=0xb7b2f5dd " \003\034\022\200\354\022\201e\034\a
\002\034\034\022\203\221\r \004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004",
rptr=0xbfffe8ec) at metadata.c:1561
#9  0x0809b403 in mono_metadata_parse_type_full (m=0x829c998, container=0x0,
mode=MONO_PARSE_PARAM, opt_attrs=0, 
    ptr=0xb7b2f5dd " \003\034\022\200\354\022\201e\034\a
\002\034\034\022\203\221\r \004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004",
rptr=0xbfffe8ec) at metadata.c:1661
#10 0x0809bb99 in mono_metadata_parse_method_signature_full (m=0x829c998,
container=0x0, def=0, 
    ptr=0xb7b2f5dd " \003\034\022\200\354\022\201e\034\a
\002\034\034\022\203\221\r \004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004", rptr=0x0) at
metadata.c:1938
#11 0x0809bcd4 in mono_metadata_parse_method_signature (m=0x829c998, def=0, 
    ptr=0xb7b2f5cb "\006 \001\002\022\203\221\t
\002\002\022\200\354\022\203\221\n \003\034\022\200\354\022\201e\034\a
\002\034\034\022\203\221\r \004\034\022\200\354\022\201e\034\022\203\221\004
\001\016\034\004\006\022\201\034\006 \001\001\022\203\221\004", rptr=0x0) at
metadata.c:1985
#12 0x08079911 in method_from_memberref (image=0x829c998, idx=336,
typespec_context=0x0, used_context=0xbfffea44) at loader.c:977
#13 0x0807abf8 in mono_get_method_from_token (image=0x829c998, token=167772496,
klass=0x0, context=0x0, used_context=0xbfffea44) at loader.c:1518
#14 0x0807b035 in mono_get_method_full (image=0x829c998, token=167772496,
klass=0x0, context=0x0) at loader.c:1632
#15 0x081028c2 in verifier_load_method (ctx=0xbfffeb8c, token=167772496,
opcode=0x81afd31 "callvirt") at verify.c:868
#16 0x08107f6e in do_invoke_method (ctx=0xbfffeb8c, method_token=167772496,
virtual=1) at verify.c:2862
#17 0x08113696 in mono_method_verify (method=0x82d958c, level=135) at
verify.c:4990
#18 0x080508ba in dump_verify_info (image=0x829c998, flags=135) at pedump.c:365
#19 0x08051692 in main (argc=4, argv=0xbffff094) at pedump.c:727

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.