Boost C++ Libraries: Ticket #4635: segmentation fault in text_oarchive::save_binary()

attachment set

Wed, 08 Sep 2010 00:43:18 GMT

attachment → save_binary_bug.cpp

Linux/C++ program.

Robert Ramey — Wed, 08 Sep 2010 17:07:09 GMT

a very good example/test. As you mention - a very, very deep stack.

Could you re-run the test with some counts which are mod 3? That is 3, 6, 9, ...

I develop on a windows system and it would be easier to ask you to just re-run the test rather than try to recreate it here.

Robert Ramey

mlheuser@… — Wed, 08 Sep 2010 19:45:26 GMT

Robert,

You are on to something. Multiples of three work fine. If there is anything else that I can do to help, don't hesitate to ask.

-Mark

Wed, 21 Mar 2012 06:39:53 GMT

I met the same issue, i debugged and found that problem is in implementation base64_from_binary. Access violation appears in file transform_width.hpp. When iterator points to the last valid byte (addr+len-1) and algorithm need one more byte to complete missing bits - it increments iterator and read after buffer.

template<class Base, int BitsOut, int BitsIn, class CharType>
CharType transform_width<Base, BitsOut, BitsIn, CharType>::fill(){
    CharType retval = 0;
    unsigned int missing_bits = BitsOut;
    for(;;){
        unsigned int bcount;
        if(! m_bufferfull){
            m_buffer = * this->base_reference();  !!! access to byte *(addr+len)
            m_bufferfull = true;
            bcount = BitsIn;
        }
        else
            bcount = BitsIn - m_displacement;
        unsigned int i = (std::min)(bcount, missing_bits);
        // shift interesting bits to least significant position
        unsigned int j = m_buffer >> (bcount - i);
        // strip off uninteresting bits
        // (note presumption of two's complement arithmetic)
        j &= ~(-(1 << i));
        // append then interesting bits to the output value
        retval <<= i;
        retval |= j;
        missing_bits -= i;
        if(0 == missing_bits)
            break;
        // note: suspect that this is not invoked for borland 5.51
        ++(this->base_reference());
        m_bufferfull = false;
    }
    return retval;
}