Re: BUG #15121: Multiple UBSAN errors
Noah Misch <noah@leadboat.com>
From: Noah Misch <noah@leadboat.com>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Tomas Vondra <tomas.vondra@2ndquadrant.com>, marxin.liska@gmail.com, pgsql-bugs@lists.postgresql.org
Date: 2019-06-29T21:03:34Z
Lists: pgsql-bugs
Attachments
- ubsan-alignment-v1.patch (text/plain) patch v1
On Sun, Mar 18, 2018 at 09:02:59PM -0400, Tom Lane wrote:
> Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> > On 03/18/2018 08:59 PM, PG Bug reporting form wrote:
> >> arrayfuncs.c:3740:17: runtime error: member access within misaligned address
> >> 0x0000028b937c for type 'struct ExpandedObjectHeader', which requires 8 byte
> >> alignment
> What I think might be happening is that the compiler is taking the
> fact that the pointer is declared as AnyArrayType *, where
>
> typedef union AnyArrayType
> {
> ArrayType flt;
> ExpandedArrayHeader xpn;
> } AnyArrayType;
>
> to assume that the pointer must be aligned on an 8-byte boundary because
> ExpandedArrayHeader would require that, even if we're only accessing the
> "flt" member.
Yep.
> Maybe that's a live problem, though we've seen no related
> trouble reports. It'd require the compiler to generate 8-byte-aligned
> instructions for accessing the ArrayType header, which doesn't seem all
> that probable.
Using different casts, as attached, silences these complaints without much
change in code cosmetics. DatumGetAnyArrayP() already assumes one can cast
between AnyArrayType and ArrayType, so this doesn't introduce new assumptions.
This is enough to make my infrequent "gcc -fsanitize=undefined
-fno-sanitize=nonnull-attribute" runs complaint-free under gcc 8.3.0 on
sparc64. (I use -fno-sanitize=nonnull-attribute to avoid the complaints about
memcpy(NULL, NULL, 0) and such. While formally undefined, fixes for those
would be uglier, and I expect we'll learn quickly enough if some
implementation treats them as other than a no-op.)
Commits
-
Don't read fields of a misaligned ExpandedObjectHeader or AnyArrayType.
- b664b187d7ea 9.5.19 landed
- cd9d48969d94 10.10 landed
- 4b85f20f948d 11.5 landed
- 2938aa2a5b1c 9.6.15 landed
- 459c3cdb4ad8 12.0 landed
-
Doc: note that statement-level view triggers require an INSTEAD OF trigger.
- a46783204713 11.0 cited