#155 Potential crash in
The mdb command seems to crash OpenOCD running on ARM. If I add the target name in front, it does not crash: "mex1 mdb 0x8000000 100" works without crashing.
telnet localhost 4444
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger
mdb 0x80000000 100
This is the output when running it in GDB:
Open On-Chip Debugger 0.10.0+dev-00151-gf3b615c-dirty (2017-06-10-16:28)
[...]
Info : accepting 'telnet' connection on tcp/4444
Program received signal SIGSEGV, Segmentation fault.
__strchrnul (s=s@entry=0x2030 <error: Cannot="" access="" memory="" at="" address="" 0x2030="">,
c_in=c_in@entry=37) at strchrnul.c:125
125 strchrnul.c: Datei oder Verzeichnis nicht gefunden.
(gdb) bt
0 __strchrnul (
s=s@entry=0x2030 <error: Cannot access memory at address 0x2030>, c_in=c_in@entry=37) at strchrnul.c:125
1 0xb6e2f346 in __find_specmb (
format=0x2030 <error: Cannot access memory at address 0x2030>) at printf-parse.h:108
2 _IO_vfprintf_internal (s=s@entry=0xbeffed30,
format=format@entry=0x2030 <error: Cannot access memory at address 0x2030>, ap=..., ap@entry=...) at vfprintf.c:1315
3 0xb6e4b244 in _IO_vsnprintf (string=0xbeffef0e "",
string@entry=0x23f116 "", maxlen=<optimized out>, maxlen@entry=4294967251, format=format@entry=0x2030 <error: Cannot access memory at address 0x2030>, args=args@entry=...) at vsnprintf.c:119
4 0xb6e35e50 in __snprintf (s=s@entry=0x23f116 "",
maxlen=maxlen@entry=4294967251, format=0x2030 <error: Cannot access memory at address 0x2030>) at snprintf.c:33
5 0x0003c7c0 in handle_md_output (
buffer=0x4e97d <script_command_run+320> "\364\026s\230B\005F-\320\025\365\026\177\322", <incomplete sequence \320>, count=100, size=1, address=9165700730159336, target=0x15d804, cmd_ctx=0x23f068) at src/target/target.c:3067
6 handle_md_command (cmd=<optimized out="">) at src/target/target.c:3125
---Type <return> to continue, or q <return> to quit---
7 0x0004e97c in run_command (num_words=3, words=0x23ffb0, c=0x2380e8,
context=0x23f068) at src/helper/command.c:611
8 script_command_run (interp=interp@entry=0x209028, argc=argc@entry=3,
argv=argv@entry=0xbeffeff8, c=0x2380e8, capture=capture@entry=true) at src/helper/command.c:208
9 0x0004eb88 in script_command (interp=0x209028, argc=3, argv=0xbeffeff8)
at src/helper/command.c:223
10 0x00100ada in JimInvokeCommand (interp=interp@entry=0x209028,
objc=objc@entry=3, objv=objv@entry=0xbeffeff8) at jim.c:10200
11 0x001011b2 in Jim_EvalObj (interp=interp@entry=0x209028,
scriptObjPtr=0x23b5a0) at jim.c:10650
12 0x00103940 in Jim_EvalCoreCommand (interp=0x209028, argc=<optimized out="">,
argv=<optimized out>) at jim.c:12923
13 0x00100ada in JimInvokeCommand (interp=interp@entry=0x209028,
objc=objc@entry=3, objv=objv@entry=0xbefff080) at jim.c:10200
14 0x001011b2 in Jim_EvalObj (interp=interp@entry=0x209028,
scriptObjPtr=0x218948) at jim.c:10650
15 0x001032ea in Jim_CatchCoreCommand (interp=0x209028, argc=1,
argv=0xbefff144) at jim.c:13925
16 0x00100ada in JimInvokeCommand (interp=interp@entry=0x209028,
objc=objc@entry=2, objv=objv@entry=0xbefff140) at jim.c:10200
17 0x001011b2 in Jim_EvalObj (interp=interp@entry=0x209028,
scriptObjPtr=0x2186b8) at jim.c:10650
---Type <return> to continue, or q <return> to quit---
I found a problem in the related code but I'm not sure if it could be the cause. Please test with http://openocd.zylin.com/4167 and report if it helps or not.
By the way, you have two different addresses in the commands you compare:
"mdb 0x80000000 100" and "mex1 mdb 0x8000000 100"; note the different number of zeros. I don't think that has anything to do with the crash.