From r|p|ey @end|ng |rom @t@t@@ox@@c@uk  Tue Jul  2 09:15:59 2019
From: r|p|ey @end|ng |rom @t@t@@ox@@c@uk (Prof Brian Ripley)
Date: Tue, 2 Jul 2019 08:15:59 +0100
Subject: [Rd] ASAN error with R-devel
In-Reply-To: <8fb769$bvkt9j@ironport10.mayo.edu>
References: <8fb769$bvkt9j@ironport10.mayo.edu>
Message-ID: <207a0404-580d-14c0-c6a8-1c0ed2b50f7d@stats.ox.ac.uk>

This is entirely within your OS's installation of Tcl/Tk and X11: the 
latter both allocated and freed.  We've seen it before (even had it as 
bug report on R). Please check your OS is fully up-to-date and if so 
report it there.

On 01/07/2019 15:55, Therneau, Terry M., Ph.D. via R-devel wrote:
> I have an ASAN enabled version of R-devel on my test machine, and can get it to relably
> crash.? Here is the first part of the session:
> 
> tmt-local2434% R --vanilla
> 
> R Under development (unstable) (2019-06-28 r76752) -- "Unsuffered Consequences"
> Platform: x86_64-pc-linux-gnu (64-bit)
> 
> R is free software and comes with ABSOLUTELY NO WARRANTY.
> You are welcome to redistribute it under certain conditions.
> Type 'license()' or 'licence()' for distribution details.
> 
>   ? Natural language support but running in an English locale
> 
> R is a collaborative project with many contributors.
> Type 'contributors()' for more information and
> 'citation()' on how to cite R or R packages in publications.
> 
> Type 'demo()' for some demos, 'help()' for on-line help, or
> 'help.start()' for an HTML browser interface to help.
> Type 'q()' to quit R.
>   > install.packages('kinship2')
> Installing package into ?/home/therneau/Rlib?
> (as ?lib? is unspecified)
> --- Please select a CRAN mirror for use in this session ---
> =================================================================
> ==21606==ERROR: AddressSanitizer: heap-use-after-free on address 0x602000042830 at pc
> 0x7f9f834fa0f7 bp 0x7fff24ab9050 sp 0x7fff24ab87f8
> READ of size 1 at 0x602000042830 thread T0
>   ??? #0 0x7f9f834fa0f6 (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)
>   ??? #1 0x7f787837d683 in _XimUnRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64683)
>   ??? #2 0x7f7878364d32 in XUnregisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bd32)
>   ??? #3 0x7f787837d566 in _XimRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x64566)
>   ??? #4 0x7f7878364cba in XRegisterIMInstantiateCallback
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x4bcba)
>   ??? #5 0x7f78745cddfb in TkpOpenDisplay (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0xf2dfb)
>   ??? #6 0x7f787453c769 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x61769)
>   ??? #7 0x7f787453d0ab in TkCreateMainWindow (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x620ab)
>   ??? #8 0x7f7874548cc6 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6dcc6)
>   ??? #9 0x7f7874546c7a (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x6bc7a)
>   ??? #10 0x7f787453f6c4 (/usr/lib/x86_64-linux-gnu/libtk8.6.so+0x646c4)
>   ??? #11 0x7f7874bf0c0b in tcltk_init /usr/local/src/R-devel/src/library/tcltk/src/tcltk.c:697
>   ??? #12 0x5582e3aa93c1 in do_dotCode /usr/local/src/R-devel/src/main/dotcode.c:1743
>   ??? #13 0x5582e3b41f79 in bcEval /usr/local/src/R-devel/src/main/eval.c:6775
>   ??? #14 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
>   ??? #15 0x5582e3b702b9 in R_execClosure /usr/local/src/R-devel/src/main/eval.c:1780
>   ??? #16 0x5582e3b72777 in Rf_applyClosure /usr/local/src/R-devel/src/main/eval.c:1706
>   ??? #17 0x5582e3b4ab0a in bcEval /usr/local/src/R-devel/src/main/eval.c:6743
>   ??? #18 0x5582e3b6a5df in Rf_eval /usr/local/src/R-devel/src/main/eval.c:620
>   ??? #19 0x5582e3b6c55e in forcePromise /usr/local/src/R-devel/src/main/eval.c:516
>   ??? #20 0x5582e3b6d22f in FORCE_PROMISE /usr/local/src/R-devel/src/main/eval.c:4900
>   ?...
>   ??? #133 0x7f788f5e6b96 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x21b96)
>   ??? #134 0x5582e392b999 in _start (/usr/local/src/R-devel/bin/exec/R+0x135999)
> 
> 0x602000055af0 is located 0 bytes inside of 1-byte region [0x602000055af0,0x602000055af1)
> freed by thread T0 here:
>   ??? #0 0x7f7891a157b8 in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.4+0xde7b8)
>   ??? #1 0x7f7878373d8c in XSetLocaleModifiers (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5ad8c)
> 
> previously allocated by thread T0 here:
>   ??? #0 0x7f7891a15b50 in __interceptor_malloc
> (/usr/lib/x86_64-linux-gnu/libasan.so.4+0xdeb50)
>   ??? #1 0x7f7878373984 in _XlcDefaultMapModifiers
> (/usr/lib/x86_64-linux-gnu/libX11.so.6+0x5a984)
> 
> SUMMARY: AddressSanitizer: heap-use-after-free
> (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x5a0f6)
> 
> ------------------------------
> The window with a choice of machines never appeared.
> 
> Terry T.
> 
> 
> 
> 
> 	[[alternative HTML version deleted]]
> 
> ______________________________________________
> R-devel at r-project.org mailing list
> https://stat.ethz.ch/mailman/listinfo/r-devel
> 


-- 
Brian D. Ripley,                  ripley at stats.ox.ac.uk
Emeritus Professor of Applied Statistics, University of Oxford



[Rd] ASAN error with R-devel
Prof Brian Ripley