#2431 SEGV on tkcanvas

[liuchenyifan]

gnuplot 5.5 (last modified in 9.18) on centos linux 7.7.1908

==4934== ERROR: AddressSanitizer: SEGV on unknown address 0x000000cb5000 (pc 0x7fd8ce20bdf4 sp 0x7ffeb199d718 bp 0x6084000138b0 T0)
AddressSanitizer can not provide additional info.
#0 0x7fd8ce20bdf3 (/usr/lib64/libc-2.17.so+0x8fdf3)
#1 0x7fd8ce1f8fdb (/usr/lib64/libc-2.17.so+0x7cfdb)
#2 0x7fd8ce1c9032 (/usr/lib64/libc-2.17.so+0x4d032)
#3 0x7fd8ce1ed43a (/usr/lib64/libc-2.17.so+0x7143a)
#4 0x7fd8ce1cf5d6 (/usr/lib64/libc-2.17.so+0x535d6)
#5 0x80c866 (/root/uniafl_evaluation/asan_program/gnuplot+0x80c866)
#6 0x757942 (/root/uniafl_evaluation/asan_program/gnuplot+0x757942)
#7 0x459f6c (/root/uniafl_evaluation/asan_program/gnuplot+0x459f6c)
#8 0x61b63b (/root/uniafl_evaluation/asan_program/gnuplot+0x61b63b)
#9 0x40772e (/root/uniafl_evaluation/asan_program/gnuplot+0x40772e)
#10 0x7fd8ce19e554 (/usr/lib64/libc-2.17.so+0x22554)
#11 0x4084ec (/root/uniafl_evaluation/asan_program/gnuplot+0x4084ec)
==4934== ABORTING

information below from valgrind:
==4949== Memcheck, a memory error detector
==4949== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==4949== Using Valgrind-3.16.1 and LibVEX; rerun with -h for copyright info
==4949== Command: /root/pfuzz-new/p-fuzz/pfcon/programs/gnuplot ./bugs/SEGV_tkcanvas
==4949==

Warning: empty y range [0:0], adjusting to [-1:1]
WARNING: Plotting with an 'unknown' terminal.
No output will be generated. Please select a terminal with 'set terminal'.

    pointsize is 1

WARNING: Plotting with an 'unknown' terminal.
No output will be generated. Please select a terminal with 'set terminal'.
==4949== Invalid read of size 1
==4949== at 0x8080D5: ??? (tkcanvas.trm:1474)
==4949== by 0x7719A1: SVG_options (svg.trm:719)
==4949== by 0x4054FFFFFFFFFFFE: ???
==4949== Address 0xf4f4f4f4f4f4afd9 is not stack'd, malloc'd or (recently) free'd
==4949==
==4949==
==4949== Process terminating with default action of signal 11 (SIGSEGV)
==4949== General Protection Fault
==4949== at 0x8080D5: ??? (tkcanvas.trm:1474)
==4949== by 0x7719A1: SVG_options (svg.trm:719)
==4949== by 0x4054FFFFFFFFFFFE: ???
==4949==
==4949== HEAP SUMMARY:
==4949== in use at exit: 117,018 bytes in 311 blocks
==4949== total heap usage: 456 allocs, 145 frees, 414,608 bytes allocated
==4949==
==4949== LEAK SUMMARY:
==4949== definitely lost: 260 bytes in 11 blocks
==4949== indirectly lost: 0 bytes in 0 blocks
==4949== possibly lost: 0 bytes in 0 blocks
==4949== still reachable: 116,758 bytes in 300 blocks
==4949== suppressed: 0 bytes in 0 blocks
==4949== Rerun with --leak-check=full to see details of leaked memory
==4949==
==4949== For lists of detected and suppressed errors, rerun with: -s
==4949== ERROR SUMMARY: 2 errors from 1 contexts (suppressed: 0 from 0)

[Ethan Merritt]

cannot reproduce