openjdk attempts to free an invalid pointer when running Alloy

Bug #341397 reported by Michael Jones
2
Affects Status Importance Assigned to Milestone
openjdk-6 (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

When running the program Alloy version 4, found at

http://alloy.mit.edu/community/software

Please let me know if I can provide more information.

*** glibc detected *** /usr/lib/jvm/java-6-openjdk/jre/bin/java: free(): invalid pointer: 0xb7332254 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7dc5454]
/lib/tls/i686/cmov/libc.so.6(cfree+0x96)[0xb7dc74b6]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb7891021]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb784a4e2]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb784bca0]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb78500c5]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so(JNI_CreateJavaVM+0x5c)[0xb7637ddc]
/usr/lib/jvm/java-6-openjdk/jre/bin/java(JavaMain+0x9e)[0x804a52e]
/lib/tls/i686/cmov/libpthread.so.0[0xb7ec450f]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7e37a0e]
======= Memory map: ========
08048000-08051000 r-xp 00000000 08:02 187345 /usr/lib/jvm/java-6-openjdk/jre/bin/java
08051000-08052000 r--p 00008000 08:02 187345 /usr/lib/jvm/java-6-openjdk/jre/bin/java
08052000-08053000 rw-p 00009000 08:02 187345 /usr/lib/jvm/java-6-openjdk/jre/bin/java
08771000-08792000 rw-p 08771000 00:00 0 [heap]
b4000000-b4021000 rw-p b4000000 00:00 0
b4021000-b4100000 ---p b4021000 00:00 0
b41ac000-b41b9000 r-xp 00000000 08:02 318629 /lib/libgcc_s.so.1
b41b9000-b41ba000 r--p 0000c000 08:02 318629 /lib/libgcc_s.so.1
b41ba000-b41bb000 rw-p 0000d000 08:02 318629 /lib/libgcc_s.so.1
b41cf000-b41d8000 rwxp b41cf000 00:00 0
b41d8000-b428f000 rwxp b41d8000 00:00 0
b428f000-b44cf000 rwxp b428f000 00:00 0
b44cf000-b728f000 rwxp b44cf000 00:00 0
b728f000-b72b3000 r-xp 00000000 08:02 11051 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b72b3000-b72b4000 r--p 00023000 08:02 11051 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b72b4000-b72b6000 rw-p 00024000 08:02 11051 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b72b6000-b72c2000 r-xp 00000000 08:02 11067 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
b72c2000-b72c3000 ---p 0000c000 08:02 11067 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
b72c3000-b72c4000 r--p 0000c000 08:02 11067 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
b72c4000-b72c5000 rw-p 0000d000 08:02 11067 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
b72c5000-b72cf000 r-xp 00000000 08:02 334955 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b72cf000-b72d0000 r--p 00009000 08:02 334955 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b72d0000-b72d1000 rw-p 0000a000 08:02 334955 /lib/tls/i686/cmov/libnss_files-2.8.90.so
b72d1000-b72da000 r-xp 00000000 08:02 335614 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b72da000-b72db000 r--p 00008000 08:02 335614 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b72db000-b72dc000 rw-p 00009000 08:02 335614 /lib/tls/i686/cmov/libnss_nis-2.8.90.so
b72dc000-b72f1000 r-xp 00000000 08:02 334947 /lib/tls/i686/cmov/libnsl-2.8.90.so
b72f1000-b72f2000 r--p 00014000 08:02 334947 /lib/tls/i686/cmov/libnsl-2.8.90.so
b72f2000-b72f3000 rw-p 00015000 08:02 334947 /lib/tls/i686/cmov/libnsl-2.8.90.so
b72f3000-b72f5000 rw-p b72f3000 00:00 0
b72f8000-b72ff000 r-xp 00000000 08:02 11068 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libzip.so
b72ff000-b7300000 r--p 00006000 08:02 11068 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libzip.so
b7300000-b7301000 rw-p 00007000 08:02 11068 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libzip.so
b7301000-b7309000 rw-s 00000000 08:03 54435 /tmp/hsperfdata_jonesmz/6915 (deleted)
b7309000-b7310000 r-xp 00000000 08:02 335619 /lib/tls/i686/cmov/librt-2.8.90.so
b7310000-b7311000 r--p 00007000 08:02 335619 /lib/tls/i686/cmov/librt-2.8.90.so
b7311000-b7312000 rw-p 00008000 08:02 335619 /lib/tls/i686/cmov/librt-2.8.90.so
b7312000-b7315000 ---p b7312000 00:00 0
b7315000-b7333000 rwxp b7315000 00:00 0
b7333000-b7357000 r-xp 00000000 08:02 334938 /lib/tls/i686/cmov/libm-2.8.90.so
b7357000-b7358000 r--p 00023000 08:02 334938 /lib/tls/i686/cmov/libm-2.8.90.so
b7358000-b7359000 rw-p 00024000 08:02 334938 /lib/tls/i686/cmov/libm-2.8.90.so
b7359000-b78e8000 r-xp 00000000 08:02 187324 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so
b78e8000-b7925000 r--p 0058e000 08:02 187324 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so
b7925000-b7933000 rw-p 005cb000 08:02 187324 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so
b7933000-b7d56000 rw-p b7933000 00:00 0
b7d56000-b7eae000 r-xp 00000000 08:02 334929 /lib/tls/i686/cmov/libc-2.8.90.so
b7eae000-b7eb0000 r--p 00158000 08:02 334929 /lib/tls/i686/cmov/libc-2.8.90.so
b7eb0000-b7eb1000 rw-p 0015a000 08:02 334929 /lib/tls/i686/cmov/libc-2.8.90.so
b7eb1000-b7eb4000 rw-p b7eb1000 00:00 0
b7eb4000-b7eb6000 r-xp 00000000 08:02 334936 /lib/tls/i686/cmov/libdl-2.8.90.so
b7eb6000-b7eb7000 r--p 00001000 08:02 334936 /lib/tls/i686/cmov/libdl-2.8.90.so
b7eb7000-b7eb8000 rw-p 00002000 08:02 334936 /lib/tls/i686/cmov/libdl-2.8.90.so
b7eb8000-b7ebc000 r-xp 00000000 08:02 187322 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/jli/libjli.so
b7ebc000-b7ebd000 r--p 00003000 08:02 187322 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/jli/libjli.so
b7ebd000-b7ebe000 rw-p 00004000 08:02 187322 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/jli/libjli.so
b7ebe000-b7ed3000 r-xp 00000000 08:02 335617 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7ed3000-b7ed4000 r--p 00014000 08:02 335617 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7ed4000-b7ed5000 rw-p 00015000 08:02 335617 /lib/tls/i686/cmov/libpthread-2.8.90.so
b7ed5000-b7ed8000 rw-p b7ed5000 00:00 0
b7ed8000-b7eec000 r-xp 00000000 08:02 1012403 /usr/lib/libz.so.1.2.3.3
b7eec000-b7eee000 rw-p 00013000 08:02 1012403 /usr/lib/libz.so.1.2.3.3
b7eee000-b7ef5000 r-xp 00000000 08:02 334949 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b7ef5000-b7ef6000 r--p 00006000 08:02 334949 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b7ef6000-b7ef7000 rw-p 00007000 08:02 334949 /lib/tls/i686/cmov/libnss_compat-2.8.90.so
b7ef7000-b7efe000 r-xp 00000000 08:02 187323 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/native_threads/libhpi.so
b7efe000-b7eff000 r--p 00006000 08:02 187323 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/native_threads/libhpi.so
b7eff000-b7f00000 rw-p 00007000 08:02 187323 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/native_threads/libhpi.so
b7f00000-b7f01000 rw-p b7f00000 00:00 0
b7f01000-b7f02000 r--p b7f01000 00:00 0
b7f02000-b7f04000 rw-p b7f02000 00:00 0
b7f04000-b7f1e000 r-xp 00000000 08:02 318325 /lib/ld-2.8.90.so
b7f1e000-b7f1f000 r-xp b7f1e000 00:00 0 [vdso]
b7f1f000-b7f20000 r--p 0001a000 08:02 318325 /lib/ld-2.8.90.so
b7f20000-b7f21000 rw-p 0001b000 08:02 318325 /lib/ld-2.8.90.so
bff0b000-bff1e000 rwxp bffeb000 00:00 0 [stack]
bff1e000-bff20000 rw-p bfffe000 00:00 0

Revision history for this message
Matthias Klose (doko) wrote :

this works in jaunty, using 4.1.9

Changed in openjdk-6 (Ubuntu):
status: New → Fix Released
Revision history for this message
Michael Jones (jonesmz) wrote : Re: [Bug 341397] Re: openjdk attempts to free an invalid pointer when running Alloy
Download full text (7.8 KiB)

Hey Matthias!

    Thanks for taking the time to look at the problem for me.

    Is there any chance you were able to test with Intrepid as well? I was
thinking that it might be a quirk of my particular system, as I'm using PAE.
Hopefully I'll be able to check with Jaunty myself soon.

-Mike

On Mon, Mar 16, 2009 at 9:10 AM, Matthias Klose <email address hidden> wrote:

> this works in jaunty, using 4.1.9
>
>
> ** Changed in: openjdk-6 (Ubuntu)
> Status: New => Fix Released
>
> --
> openjdk attempts to free an invalid pointer when running Alloy
> https://bugs.launchpad.net/bugs/341397
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in “openjdk-6” source package in Ubuntu: Fix Released
>
> Bug description:
> When running the program Alloy version 4, found at
>
>
> http://alloy.mit.edu/community/software
>
> Please let me know if I can provide more information.
>
> *** glibc detected *** /usr/lib/jvm/java-6-openjdk/jre/bin/java: free():
> invalid pointer: 0xb7332254 ***
> ======= Backtrace: =========
> /lib/tls/i686/cmov/libc.so.6[0xb7dc5454]
> /lib/tls/i686/cmov/libc.so.6(cfree+0x96)[0xb7dc74b6]
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb7891021]
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb784a4e2]
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb784bca0]
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb78500c5]
>
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so(JNI_CreateJavaVM+0x5c)[0xb7637ddc]
> /usr/lib/jvm/java-6-openjdk/jre/bin/java(JavaMain+0x9e)[0x804a52e]
> /lib/tls/i686/cmov/libpthread.so.0[0xb7ec450f]
> /lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7e37a0e]
> ======= Memory map: ========
> 08048000-08051000 r-xp 00000000 08:02 187345
> /usr/lib/jvm/java-6-openjdk/jre/bin/java
> 08051000-08052000 r--p 00008000 08:02 187345
> /usr/lib/jvm/java-6-openjdk/jre/bin/java
> 08052000-08053000 rw-p 00009000 08:02 187345
> /usr/lib/jvm/java-6-openjdk/jre/bin/java
> 08771000-08792000 rw-p 08771000 00:00 0 [heap]
> b4000000-b4021000 rw-p b4000000 00:00 0
> b4021000-b4100000 ---p b4021000 00:00 0
> b41ac000-b41b9000 r-xp 00000000 08:02 318629 /lib/libgcc_s.so.1
> b41b9000-b41ba000 r--p 0000c000 08:02 318629 /lib/libgcc_s.so.1
> b41ba000-b41bb000 rw-p 0000d000 08:02 318629 /lib/libgcc_s.so.1
> b41cf000-b41d8000 rwxp b41cf000 00:00 0
> b41d8000-b428f000 rwxp b41d8000 00:00 0
> b428f000-b44cf000 rwxp b428f000 00:00 0
> b44cf000-b728f000 rwxp b44cf000 00:00 0
> b728f000-b72b3000 r-xp 00000000 08:02 11051
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
> b72b3000-b72b4000 r--p 00023000 08:02 11051
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
> b72b4000-b72b6000 rw-p 00024000 08:02 11051
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
> b72b6000-b72c2000 r-xp 00000000 08:02 11067
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
> b72c2000-b72c3000 ---p 0000c000 08:02 11067
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
> b72c3000-b72c4000 r--p 0000c000 08:02 11067
> /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libverify.so
> b72c4000-b72c5000 rw-p 0000d000 08:02 11067...

Read more...

Revision history for this message
Michael Jones (jonesmz) wrote :
Download full text (7.4 KiB)

Hi there

    Alloy 4.1.10 also suffers this problem

    Heres a stack trace

jonesmz@jonesmz-laptop:~$ java -jar /home/jonesmz/Desktop/alloy4.jar
*** glibc detected *** /usr/lib/jvm/java-6-openjdk/jre/bin/java: free(): invalid pointer: 0xb74b2254 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7f45454]
/lib/tls/i686/cmov/libc.so.6(cfree+0x96)[0xb7f474b6]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb7a11021]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb79ca4e2]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb79cbca0]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so[0xb79d00c5]
/usr/lib/jvm/java-6-openjdk/jre/lib/i386/server/libjvm.so(JNI_CreateJavaVM+0x5c)[0xb77b7ddc]
/usr/lib/jvm/java-6-openjdk/jre/bin/java(JavaMain+0x9e)[0x804a52e]
/lib/tls/i686/cmov/libpthread.so.0[0xb804450f]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7fb7a0e]
======= Memory map: ========
08048000-08051000 r-xp 00000000 08:02 221620 /usr/lib/jvm/java-6-openjdk/jre/bin/java
08051000-08052000 r--p 00008000 08:02 221620 /usr/lib/jvm/java-6-openjdk/jre/bin/java
08052000-08053000 rw-p 00009000 08:02 221620 /usr/lib/jvm/java-6-openjdk/jre/bin/java
09a2e000-09a4f000 rw-p 09a2e000 00:00 0 [heap]
b4200000-b4221000 rw-p b4200000 00:00 0
b4221000-b4300000 ---p b4221000 00:00 0
b432a000-b4337000 r-xp 00000000 08:02 318629 /lib/libgcc_s.so.1
b4337000-b4338000 r--p 0000c000 08:02 318629 /lib/libgcc_s.so.1
b4338000-b4339000 rw-p 0000d000 08:02 318629 /lib/libgcc_s.so.1
b434e000-b4357000 rwxp b434e000 00:00 0
b4357000-b440e000 rwxp b4357000 00:00 0
b440e000-b464e000 rwxp b440e000 00:00 0
b464e000-b740e000 rwxp b464e000 00:00 0
b740e000-b7432000 r-xp 00000000 08:02 221572 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b7432000-b7433000 r--p 00023000 08:02 221572 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b7433000-b7435000 rw-p 00024000 08:02 221572 /usr/lib/jvm/java-6-openjdk/jre/lib/i386/libjava.so
b74350...

Read more...

Revision history for this message
Michael Jones (jonesmz) wrote :

Ah, also if it wasn't clear when I posted the report, even though openJDK complains, it still runs the program with no problem. So if the test that Matthias ran encountered an operational program, but didn't check to make sure that openJDK didn't report a problem, then this shouldn't be marked as fix committed.

Revision history for this message
Michael Jones (jonesmz) wrote :

aha! openJDK doesn't report the same glitch

Revision history for this message
Michael Jones (jonesmz) wrote :

Ah, I meant it doesnt report the same glitch on a 64 bit machine.
openJDK is what reports the glitch on my 32 bit machine.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.