[Mono-bugs] [Bug 560359] [verifier] abort in mono_metadata_decode_row on bad assembly

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=560359

http://bugzilla.novell.com/show_bug.cgi?id=560359#c2


--- Comment #2 from Sebastien Pouliot <spouliot at novell.com> 2010-07-19 19:26:37 UTC ---
Created an attachment (id=376926)
 --> (http://bugzilla.novell.com/attachment.cgi?id=376926)
assembly causing the abort

more recent test case on x86 opensuse 11.3

gdb --args pedump --verify all bin/System.sigabrt.39405.dll


Error: Stack underflow, required 2, but have 0 at 0x01ef
* Assertion at metadata.c:965, condition `idx < t->rows' not met


Program received signal SIGABRT, Aborted.
0xffffe424 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe424 in __kernel_vsyscall ()
#1  0xb7e2d7ff in raise () from /lib/libc.so.6
#2  0xb7e2f140 in abort () from /lib/libc.so.6
#3  0x0818f08a in monoeg_g_logv (log_domain=0x0, log_level=G_LOG_LEVEL_ERROR,
format=0x81a21f0 "* Assertion at %s:%d, condition `%s' not met\n", 
    args=0xbfffea84 "\342!\032\b\305\003") at goutput.c:134
#4  0x0818f109 in monoeg_assertion_message (format=0x81a21f0 "* Assertion at
%s:%d, condition `%s' not met\n") at goutput.c:154
#5  0x0809a243 in mono_metadata_decode_row (t=0x829ca74, idx=393218,
res=0xbfffeaf4, res_size=3) at metadata.c:965
#6  0x08067f68 in mono_ldtoken (image=0x829c998, token=168165379,
handle_class=0xbfffeb40, context=0x0) at class.c:7425
#7  0x0810ac80 in do_load_token (ctx=0xbfffeb8c, token=168165379) at
verify.c:3312
#8  0x08114f05 in mono_method_verify (method=0x82de79c, level=135) at
verify.c:5325
#9  0x080508ba in dump_verify_info (image=0x829c998, flags=135) at pedump.c:365
#10 0x08051692 in main (argc=4, argv=0xbffff094) at pedump.c:727

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.