[Xenomai-core] Analogy a4l_fill_desc() bug

[Xenomai-core] Analogy a4l_fill_desc() bug

[Daniele Nicolodi]

Hello.

I found a bug in a4l_fill_desc(). If I call it on a descriptor obtained
for an unattached device, the memory allocated for the sbdata descriptor
field is corrupted in a bad way. When, after the failing a4l_fill_desc()
call, I free() it, glibc complains about an "invalid next size" for the
memory chunk.

I'm on x86 architecture using kernel 2.6.30.10 with xenomai 2.5.1.

Thanks. Cheers,
-- 
Daniele

Re: [Xenomai-core] Analogy a4l_fill_desc() bug

[Simon Boulay]

On Thu, Mar 11, 2010 at 6:12 PM, Daniele Nicolodi <daniele@domain.hid> wrote:
> Hello.
Hello.

> I found a bug in a4l_fill_desc(). If I call it on a descriptor obtained
> for an unattached device, the memory allocated for the sbdata descriptor
> field is corrupted in a bad way. When, after the failing a4l_fill_desc()
> call, I free() it, glibc complains about an "invalid next size" for the
> memory chunk.

> I'm on x86 architecture using kernel 2.6.30.10 with xenomai 2.5.1.
I can't talk for Alex (the analogy developer) and I'm pretty sure he
will help you by the end of the week...
This bug reminds me an old one which have been fixed. I think that you
should work with the analogy branch of Alex (abe) repository here:
http://git.xenomai.org/?p=xenomai-abe.git;a=shortlog;h=refs/heads/analogy
There is a lot of fixes there; especially for NI driver.


Simon.

>
> Thanks. Cheers,
> --
> Daniele
>
> _______________________________________________
> Xenomai-core mailing list
> Xenomai-core@domain.hid
> https://mail.gna.org/listinfo/xenomai-core
>

Re: [Xenomai-core] Analogy a4l_fill_desc() bug

[Daniele Nicolodi]

On 11/03/10 18:12, Daniele Nicolodi wrote:
> Hello.
> 
> I found a bug in a4l_fill_desc(). If I call it on a descriptor obtained
> for an unattached device, the memory allocated for the sbdata descriptor
> field is corrupted in a bad way. When, after the failing a4l_fill_desc()
> call, I free() it, glibc complains about an "invalid next size" for the
> memory chunk.
> 
> I'm on x86 architecture using kernel 2.6.30.10 with xenomai 2.5.1.

This bug is still biting me...

Cheers,
-- 
Daniele

Re: [Xenomai-core] Analogy a4l_fill_desc() bug

[Alexis Berlemont]

Hi,

On Wed, Jun 16, 2010 at 7:01 PM, Daniele Nicolodi <daniele@domain.hid> wrote:
> On 11/03/10 18:12, Daniele Nicolodi wrote:
>> Hello.
>>
>> I found a bug in a4l_fill_desc(). If I call it on a descriptor obtained
>> for an unattached device, the memory allocated for the sbdata descriptor
>> field is corrupted in a bad way. When, after the failing a4l_fill_desc()
>> call, I free() it, glibc complains about an "invalid next size" for the
>> memory chunk.
>>
>> I'm on x86 architecture using kernel 2.6.30.10 with xenomai 2.5.1.
>
> This bug is still biting me...

A few months ago, I fixed a bug in a4l_fill_desc() and I forgot there
were two. So I closed the case in my TODO list.

Many thanks for reminding me.

>
> Cheers,
> --
> Daniele
>
> _______________________________________________
> Xenomai-core mailing list
> Xenomai-core@domain.hid
> https://mail.gna.org/listinfo/xenomai-core
>

Alexis.

Re: [Xenomai-core] Analogy a4l_fill_desc() bug

[Alexis Berlemont]

Hi,

Alexis Berlemont wrote:
> Hi,
> 
> On Wed, Jun 16, 2010 at 7:01 PM, Daniele Nicolodi <daniele@domain.hid> wrote:
> > On 11/03/10 18:12, Daniele Nicolodi wrote:
> >> Hello.
> >>
> >> I found a bug in a4l_fill_desc(). If I call it on a descriptor obtained
> >> for an unattached device, the memory allocated for the sbdata descriptor
> >> field is corrupted in a bad way. When, after the failing a4l_fill_desc()
> >> call, I free() it, glibc complains about an "invalid next size" for the
> >> memory chunk.
> >>
> >> I'm on x86 architecture using kernel 2.6.30.10 with xenomai 2.5.1.
> >
> > This bug is still biting me...
> 
> A few months ago, I fixed a bug in a4l_fill_desc() and I forgot there
> were two. So I closed the case in my TODO list.
> 
> Many thanks for reminding me.
> 

The bug should be fixed in my git repository now (branch analogy).

> >
> > Cheers,
> > --
> > Daniele
> >
> > _______________________________________________
> > Xenomai-core mailing list
> > Xenomai-core@domain.hid
> > https://mail.gna.org/listinfo/xenomai-core
> >
> 
> Alexis.

-- 
Alexis.