[Bug 1315590] [NEW] gdb Infinite recursion and SEGFAULT in cplus_demangle_print_callback

[Reagan Sanders]

Public bug reported:

gdb enters into an infinite recursion loop and segfaults while
attempting to load symbols from a binary. This appears to be related to
demangling certain symbol names in the debugged executable. This is 100%
reproducible.

This appears to be the same issues as
https://sourceware.org/bugzilla/show_bug.cgi?id=14963 . All of the test
cases uploaded there trigger the crash. The most relevant examples are
cross-attached to this report.

Steps to reproduce:
$ g++ -std=c++11 -o test test.cpp
$ gdb test
GNU gdb (Ubuntu 7.7-0ubuntu3) 7.7
Copyright (C) 2014 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
<snip>
This GDB was configured as "x86_64-linux-gnu".
<snip>
Reading symbols from test...Segmentation fault (core dumped)

Relevant portion of the stack trace for gdb:
(gdb) bt -25
#34325 0x00000000007136b7 in ?? ()
#34326 0x0000000000713989 in ?? ()
#34327 0x000000000071387f in ?? ()
#34328 0x0000000000713989 in ?? ()
#34329 0x0000000000714f7d in ?? ()
#34330 0x0000000000713667 in ?? ()
#34331 0x0000000000719a7b in cplus_demangle_print_callback ()
#34332 0x0000000000719c84 in ?? ()
#34333 0x0000000000719d97 in ?? ()
#34334 0x0000000000719f3e in cplus_demangle_v3 ()
#34335 0x000000000070c3a6 in cplus_demangle ()
#34336 0x000000000068fdbb in bfd_demangle ()
#34337 0x000000000055f239 in symbol_set_names ()
#34338 0x00000000005cb985 in prim_record_minimal_symbol_full ()
#34339 0x00000000004f82ca in ?? ()
#34340 0x00000000004f8b95 in ?? ()
#34341 0x000000000056a8a9 in ?? ()
#34342 0x000000000056a429 in ?? ()
#34343 0x000000000056a984 in symbol_file_add ()
#34344 0x000000000056a9e5 in ?? ()
#34345 0x000000000059218e in catch_command_errors_const ()
#34346 0x0000000000594d75 in ?? ()
#34347 0x000000000059202a in catch_errors ()
#34348 0x0000000000595214 in gdb_main ()
#34349 0x000000000045390e in main ()

System Information:
Linux anput 3.13.0-24-generic #46-Ubuntu SMP Thu Apr 10 19:11:08 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
Ubuntu 14.04 LTS
gdb 7.7-0ubuntu3

** Affects: gdb (Ubuntu)
     Importance: Undecided
         Status: Confirmed

** Attachment added: "Test case. Compile with g++ -std=c++11 -o test test.cpp"
   https://bugs.launchpad.net/bugs/1315590/+attachment/4103792/+files/test.cpp

** Changed in: gdb (Ubuntu)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gdb in Ubuntu.
https://bugs.launchpad.net/bugs/1315590

Title:
  gdb Infinite recursion and SEGFAULT in cplus_demangle_print_callback

Status in “gdb” package in Ubuntu:
  Confirmed

Bug description:
  gdb enters into an infinite recursion loop and segfaults while
  attempting to load symbols from a binary. This appears to be related
  to demangling certain symbol names in the debugged executable. This is
  100% reproducible.

  This appears to be the same issues as
  https://sourceware.org/bugzilla/show_bug.cgi?id=14963 . All of the
  test cases uploaded there trigger the crash. The most relevant
  examples are cross-attached to this report.

  Steps to reproduce:
  $ g++ -std=c++11 -o test test.cpp
  $ gdb test
  GNU gdb (Ubuntu 7.7-0ubuntu3) 7.7
  Copyright (C) 2014 Free Software Foundation, Inc.
  License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
  <snip>
  This GDB was configured as "x86_64-linux-gnu".
  <snip>
  Reading symbols from test...Segmentation fault (core dumped)

  Relevant portion of the stack trace for gdb:
  (gdb) bt -25
  #34325 0x00000000007136b7 in ?? ()
  #34326 0x0000000000713989 in ?? ()
  #34327 0x000000000071387f in ?? ()
  #34328 0x0000000000713989 in ?? ()
  #34329 0x0000000000714f7d in ?? ()
  #34330 0x0000000000713667 in ?? ()
  #34331 0x0000000000719a7b in cplus_demangle_print_callback ()
  #34332 0x0000000000719c84 in ?? ()
  #34333 0x0000000000719d97 in ?? ()
  #34334 0x0000000000719f3e in cplus_demangle_v3 ()
  #34335 0x000000000070c3a6 in cplus_demangle ()
  #34336 0x000000000068fdbb in bfd_demangle ()
  #34337 0x000000000055f239 in symbol_set_names ()
  #34338 0x00000000005cb985 in prim_record_minimal_symbol_full ()
  #34339 0x00000000004f82ca in ?? ()
  #34340 0x00000000004f8b95 in ?? ()
  #34341 0x000000000056a8a9 in ?? ()
  #34342 0x000000000056a429 in ?? ()
  #34343 0x000000000056a984 in symbol_file_add ()
  #34344 0x000000000056a9e5 in ?? ()
  #34345 0x000000000059218e in catch_command_errors_const ()
  #34346 0x0000000000594d75 in ?? ()
  #34347 0x000000000059202a in catch_errors ()
  #34348 0x0000000000595214 in gdb_main ()
  #34349 0x000000000045390e in main ()

  System Information:
  Linux anput 3.13.0-24-generic #46-Ubuntu SMP Thu Apr 10 19:11:08 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
  Ubuntu 14.04 LTS
  gdb 7.7-0ubuntu3

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdb/+bug/1315590/+subscriptions