search

kevinlawler / kona

Open-source implementation of the K programming language
ISC License
1.36k stars 138 forks source link

stack-overflow in ci #490

Closed gy741 closed 6 years ago

gy741 commented 6 years ago

Hello.

I found a stack-overflow bug in kona.

Please confirm.

Thanks.

Summary: stack-overflow OS: CentOS 7 64bit Version: commit a8e07c75ab318ea87b2cfa4b488e21c86caf1ad4 PoC Download: OV_ci.zip

Steps to reproduce: 1.Compile the source code with ASan. 2.Execute the following command : ./k $FILE

=================================================================
==32589==ERROR: AddressSanitizer: stack-overflow on address 0x7ffd71fc6ff8 (pc 0x00000057927d bp 0x7ffd727c3130 sp 0x7ffd71fc7000 T0)
    #0 0x57927c in ci /home/karas/kona/src/km.c:112
    #1 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #2 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #3 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #4 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #5 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #6 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #7 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #8 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #9 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #10 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #11 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #12 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #13 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #14 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #15 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #16 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #17 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #18 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #19 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #20 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #21 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #22 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #23 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #24 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #25 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #26 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #27 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #28 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #29 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #30 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #31 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #32 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #33 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #34 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #35 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #36 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #37 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #38 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #39 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #40 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #41 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #42 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #43 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #44 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #45 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #46 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #47 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #48 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #49 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #50 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #51 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #52 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #53 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #54 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #55 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #56 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #57 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #58 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #59 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #60 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #61 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #62 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #63 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #64 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #65 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #66 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #67 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #68 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #69 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #70 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #71 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #72 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #73 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #74 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #75 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #76 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #77 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #78 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #79 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #80 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #81 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #82 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #83 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #84 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #85 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #86 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #87 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #88 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #89 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #90 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #91 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #92 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #93 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #94 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #95 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #96 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #97 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #98 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #99 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #100 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #101 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #102 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #103 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #104 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #105 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #106 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #107 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #108 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #109 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #110 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #111 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #112 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #113 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #114 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #115 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #116 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #117 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #118 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #119 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #120 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #121 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #122 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #123 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #124 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #125 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #126 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #127 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #128 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #129 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #130 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #131 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #132 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #133 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #134 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #135 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #136 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #137 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #138 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #139 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #140 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #141 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #142 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #143 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #144 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #145 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #146 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #147 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #148 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #149 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #150 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #151 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #152 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #153 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #154 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #155 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #156 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #157 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #158 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #159 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #160 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #161 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #162 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #163 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #164 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #165 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #166 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #167 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #168 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #169 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #170 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #171 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #172 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #173 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #174 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #175 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #176 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #177 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #178 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #179 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #180 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #181 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #182 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #183 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #184 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #185 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #186 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #187 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #188 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #189 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #190 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #191 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #192 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #193 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #194 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #195 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #196 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #197 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #198 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #199 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #200 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #201 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #202 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #203 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #204 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #205 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #206 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #207 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #208 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #209 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #210 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #211 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #212 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #213 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #214 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #215 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #216 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #217 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #218 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #219 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #220 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #221 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #222 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #223 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #224 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #225 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #226 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #227 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #228 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #229 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #230 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #231 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #232 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #233 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #234 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #235 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #236 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #237 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #238 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #239 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #240 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #241 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #242 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #243 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #244 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #245 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #246 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #247 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #248 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #249 0x579348 in ci /home/karas/kona/src/km.c:119:5
    #250 0x579348 in ci /home/karas/kona/src/km.c:119:5

SUMMARY: AddressSanitizer: stack-overflow /home/karas/kona/src/km.c:112 in ci
==32589==ABORTING

========================================== [Acknowledgement] This work was supported by ICT R&D program of MSIP/IITP. [R7518-16-1001, Innovation hub for high Performance Computing]

tavmem commented 6 years ago

I tried to reproduce this issue (with kona compiled with ASan) ... and could not. I may need more info re the file that you loaded.

$ cd
$ git clone https://github.com/tavmem/nsl
Cloning into 'nsl'...
remote: Counting objects: 117, done.
remote: Total 117 (delta 0), reused 0 (delta 0), pack-reused 117
Receiving objects: 100% (117/117), 19.76 KiB | 361.00 KiB/s, done.
Resolving deltas: 100% (50/50), done.
$ cd ~/kona
$ ./k ~/nsl/Nray.k
K Console - Enter \ for help

  \v
`U `S `I `T `V `N `C `R
    \\
$ 
$ ./k $FILE
K Console - Enter \ for help

  \\
$
gy741 commented 6 years ago

Hello,

What is nsl?

Here, $ FILE means the POC file.

I replicated the problem with Ubuntu OS.

The problem can be reproduced without the ASan build.

Thanks.

Steps to reproduce:

karas@karas-sec:~/0212$ git clone https://github.com/kevinlawler/kona.git
Cloning into 'kona'...
remote: Counting objects: 5474, done.
remote: Compressing objects: 100% (29/29), done.
remote: Total 5474 (delta 11), reused 16 (delta 11), pack-reused 5434
Receiving objects: 100% (5474/5474), 2.24 MiB | 1.23 MiB/s, done.
Resolving deltas: 100% (3902/3902), done.
karas@karas-sec:~/0212$ cd kona/
karas@karas-sec:~/0212/kona$ ls
bench  Kona.png  LICENSE  Makefile  misc  README.md  src  verb
karas@karas-sec:~/0212/kona$ make -j4
echo "#define KBUILD_DATE \"`date +%Y-%m-%d`\"" >src/kbuild.h
cc -g -pthread -O3    -c -o src/0.o src/0.c
cc -g -pthread -O3    -c -o src/bswap.o src/bswap.c
cc -g -pthread -O3    -c -o src/c.o src/c.c
cc -g -pthread -O3    -c -o src/getline.o src/getline.c
cc -g -pthread -O3    -c -o src/mt.o src/mt.c
cc -g -pthread -O3    -c -o src/p.o src/p.c
cc -g -pthread -O3    -c -o src/r.o src/r.c
cc -g -pthread -O3    -c -o src/k.o src/k.c
cc -g -pthread -O3    -c -o src/kc.o src/kc.c
cc -g -pthread -O3    -c -o src/kx.o src/kx.c
cc -g -pthread -O3    -c -o src/kg.o src/kg.c
cc -g -pthread -O3    -c -o src/km.o src/km.c
cc -g -pthread -O3    -c -o src/kn.o src/kn.c
cc -g -pthread -O3    -c -o src/ko.o src/ko.c
cc -g -pthread -O3    -c -o src/ks.o src/ks.c
cc -g -pthread -O3    -c -o src/v.o src/v.c
cc -g -pthread -O3    -c -o src/va.o src/va.c
cc -g -pthread -O3    -c -o src/vc.o src/vc.c
cc -g -pthread -O3    -c -o src/vd.o src/vd.c
cc -g -pthread -O3    -c -o src/vf.o src/vf.c
cc -g -pthread -O3    -c -o src/vg.o src/vg.c
cc -g -pthread -O3    -c -o src/vq.o src/vq.c
cc -g -pthread -O3    -c -o src/main.o src/main.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/0.t.o src/0.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/bswap.t.o src/bswap.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/c.t.o src/c.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/getline.t.o src/getline.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/mt.t.o src/mt.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/p.t.o src/p.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/r.t.o src/r.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/k.t.o src/k.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/kc.t.o src/kc.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/kx.t.o src/kx.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/kg.t.o src/kg.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/km.t.o src/km.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/kn.t.o src/kn.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/ko.t.o src/ko.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/ks.t.o src/ks.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/v.t.o src/v.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/va.t.o src/va.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/vc.t.o src/vc.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/vd.t.o src/vd.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/vf.t.o src/vf.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/vg.t.o src/vg.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/vq.t.o src/vq.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/main.t.o src/main.c
cc -g -pthread -O0 -g3 -DDEBUG -Wall -c  -o src/tests.t.o src/tests.c
cc -g -pthread -O3  src/0.o src/bswap.o src/c.o src/getline.o src/mt.o src/p.o src/r.o src/k.o src/kc.o src/kx.o src/kg.o src/km.o src/kn.o src/ko.o src/ks.o src/v.o src/va.o src/vc.o src/vd.o src/vf.o src/vg.o src/vq.o src/main.o -o k -lm -ldl
cc -g -pthread -O0 -g3 -DDEBUG -Wall src/0.t.o src/bswap.t.o src/c.t.o src/getline.t.o src/mt.t.o src/p.t.o src/r.t.o src/k.t.o src/kc.t.o src/kx.t.o src/kg.t.o src/km.t.o src/kn.t.o src/ko.t.o src/ks.t.o src/v.t.o src/va.t.o src/vc.t.o src/vd.t.o src/vf.t.o src/vg.t.o src/vq.t.o src/main.t.o src/tests.t.o -o k_test -lm -ldl
karas@karas-sec:~/0212/kona$ wget https://github.com/kevinlawler/kona/files/1714993/OV_ci.zip
--2018-02-12 12:44:16--  https://github.com/kevinlawler/kona/files/1714993/OV_ci.zip
Resolving github.com (github.com)... 192.30.255.113, 192.30.255.112
Connecting to github.com (github.com)|192.30.255.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://github-production-repository-file-5c1aeb.s3.amazonaws.com/862601/1714993?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180212%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180212T034416Z&X-Amz-Expires=300&X-Amz-Signature=10776575bdd41f4e3b9e2643552dd26906342ebda6b8ca1b138fdb95741708fa&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3Bfilename%3DOV_ci.zip&response-content-type=application%2Fx-zip-compressed [following]
--2018-02-12 12:44:17--  https://github-production-repository-file-5c1aeb.s3.amazonaws.com/862601/1714993?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIWNJYAX4CSVEH53A%2F20180212%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20180212T034416Z&X-Amz-Expires=300&X-Amz-Signature=10776575bdd41f4e3b9e2643552dd26906342ebda6b8ca1b138fdb95741708fa&X-Amz-SignedHeaders=host&actor_id=0&response-content-disposition=attachment%3Bfilename%3DOV_ci.zip&response-content-type=application%2Fx-zip-compressed
Resolving github-production-repository-file-5c1aeb.s3.amazonaws.com (github-production-repository-file-5c1aeb.s3.amazonaws.com)... 52.216.83.16
Connecting to github-production-repository-file-5c1aeb.s3.amazonaws.com (github-production-repository-file-5c1aeb.s3.amazonaws.com)|52.216.83.16|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 172 [application/x-zip-compressed]
Saving to: ‘OV_ci.zip’

OV_ci.zip           100%[===================>]     172  --.-KB/s    in 0s      

2018-02-12 12:44:18 (3.59 MB/s) - ‘OV_ci.zip’ saved [172/172]

karas@karas-sec:~/0212/kona$ unzip OV_ci.zip 
Archive:  OV_ci.zip
  inflating: OV_ci                   
karas@karas-sec:~/0212/kona$ ./k OV_ci
Segmentation fault
tavmem commented 6 years ago

Thanks. I was able to reproduce the segmentation fault (with and without ASan)

$ ./k ~/Downloads/OV_ci
Segmentation fault (core dumped)
$

The following is just for documentation: I am using Fedora -27. When using ASan, I don't get the ASan messages about "stack overfllow".

Contents of the OV-ci file:

$ cat OV_ci
.k//////P///////////////////////!o:$ 
$

I aso get segmentation fault when entering that string in a console session:

$ ./k
K Console - Enter \ for help

  .k//////P///////////////////////!o:
Segmentation fault (core dumped)
$

Thiis case is similar to the 12,381 cases submitted in issue 468.