[Bug 2035] New: psxcancel reveals NULL pointer access in _Thread_queue_Extract()

bugzilla-daemon at rtems.org bugzilla-daemon at rtems.org
Mon Mar 5 08:22:32 UTC 2012


https://www.rtems.org/bugzilla/show_bug.cgi?id=2035

             Bug #: 2035
           Summary: psxcancel reveals NULL pointer access in
                    _Thread_queue_Extract()
    Classification: Unclassified
           Product: RTEMS
           Version: HEAD
          Platform: All
        OS/Version: RTEMS
            Status: NEW
          Severity: blocker
          Priority: P3
         Component: cpukit
        AssignedTo: joel.sherrill at oarcorp.com
        ReportedBy: sebastian.huber at embedded-brains.de


The test psxcancel reveals a NULL pointer access in _Thread_queue_Extract():

sparc-rtems4.11-gdb psxcancel.ralf
tar sim
b _Thread_queue_Extract if the_thread_queue == 0
load
r

*** POSIX CANCEL TEST ***
Init - pthread_setcancelstate - NULL oldstate - EINVAL
Init - pthread_setcancelstate - bad state - EINVAL
Init - pthread_setcanceltype - NULL oldtype - EINVAL
Init - pthread_setcanceltype - bad type - EINVAL
Init - pthread_cancel - bad ID - EINVAL
countTaskDeferred: elapsed time (second):  0
countTaskDeferred: elapsed time (second):  1
countTaskDeferred: elapsed time (second):  2
countTaskDeferred: elapsed time (second):  3
countTaskDeferred: elapsed time (second):  4
countTaskAsync: elapsed time (second):  0
countTaskAsync: elapsed time (second):  1
countTaskAsync: elapsed time (second):  2
countTaskAsync: elapsed time (second):  3
countTaskAsync: elapsed time (second):  4

Breakpoint 1, _Thread_queue_Extract (the_thread_queue=0x0,
the_thread=0x203b5f8) at
../../../../../../git-rtems/c/src/../../cpukit/score/src/threadqextract.c:52
52        if  ( the_thread_queue->discipline ==
THREAD_QUEUE_DISCIPLINE_PRIORITY )

-- 
Configure bugmail: https://www.rtems.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the bugs mailing list