breakpoints/1897: gdb crashes while resetting breakpoint

[skosenko at msn dot com]

>Number:         1897
>Category:       breakpoints
>Synopsis:       gdb crashes while resetting breakpoint
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    unassigned
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Mar 18 16:38:02 UTC 2005
>Closed-Date:
>Last-Modified:
>Originator:     Sergey Kosenko
>Release:        GNU gdb 6.3.0.20050315, 6.3
>Organization:
>Environment:

RHEL 3.0 update 1
gcc 3.3.2 vanila

(gdb) shell rpm -qa glibc
glibc-2.3.2-95.6
>Description:
Recurrence of this bug is very high.

Here Is backtrace:

bash-2.05b$ ~/bin/gdb ~/bin/gdb core
GNU gdb 6.3.0.20050315
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1".

Core was generated by `/home/nbkp88i/bin/gdb ./build/linux-i686-gcc-AS30/debug/Publisher-5.11-dbg'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /usr/lib/libncurses.so.5...done.
Loaded symbols for /usr/lib/libncurses.so.5
Reading symbols from /lib/tls/libm.so.6...done.
Loaded symbols for /lib/tls/libm.so.6
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /usr/lib/libgpm.so.1...done.
Loaded symbols for /usr/lib/libgpm.so.1
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/tls/libthread_db.so.1...done.
Loaded symbols for /lib/tls/libthread_db.so.1
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
#0  check_typedef (type=0x315f534e) at ../../gdb/gdbtypes.c:1369
1369      while (TYPE_CODE (type) == TYPE_CODE_TYPEDEF)
(gdb) bt
#0  check_typedef (type=0x315f534e) at ../../gdb/gdbtypes.c:1369
#1  0x08101424 in total_number_of_methods (type=0x315f534e) at ../../gdb/linespec.c:178
#2  0x0810145d in total_number_of_methods (type=0x8a4435c) at ../../gdb/linespec.c:184
#3  0x0810145d in total_number_of_methods (type=0x8add92c) at ../../gdb/linespec.c:184
#4  0x0810145d in total_number_of_methods (type=0x8add8b0) at ../../gdb/linespec.c:184
#5  0x0810145d in total_number_of_methods (type=0x8add858) at ../../gdb/linespec.c:184
#6  0x08102c65 in find_method (funfirstline=1, canonical=0x315f534e, saved_arg=0x84db750 "PublisherComm::newClient",
    copy=0xbfffb48c "newClient", t=0x8add858, sym_class=0x8b122c0) at ../../gdb/linespec.c:1405
#7  0x081029d1 in decode_compound (argptr=0xbfffb578, funfirstline=1, canonical=0x0, saved_arg=0x84db750 "PublisherComm::newClient",
    p=0x84db768 "") at ../../gdb/linespec.c:1329
#8  0x08102258 in decode_line_1 (argptr=0xbfffb578, funfirstline=1, default_symtab=0xc3a5114, default_line=202, canonical=0x0,
    not_found_ptr=0x0) at ../../gdb/linespec.c:738
#9  0x080da87c in breakpoint_re_set_one (bint=0x89a8828) at ../../gdb/breakpoint.c:7207
#10 0x080842e1 in do_catch_errors (uiout=0x82ee448, data=0x315f534e) at ../../gdb/top.c:524
#11 0x08084160 in catcher (func=0x80842d0 <do_catch_errors>, func_uiout=0x82ee448, func_args=0xbfffb6d0, func_val=0xbfffb6c8,
    func_caught=0xbfffb6cc, errstring=0x315f534e <Address 0x315f534e out of bounds>, gdberrmsg=0x0, mask=6) at ../../gdb/top.c:431
#12 0x08084340 in catch_errors (func=0x315f534e, func_args=0x315f534e, errstring=0x315f534e <Address 0x315f534e out of bounds>,
    mask=828330830) at ../../gdb/top.c:536
#13 0x080daab9 in breakpoint_re_set () at ../../gdb/breakpoint.c:7391
#14 0x080fbac5 in new_symfile_objfile (objfile=0x315f534e, mainline=0, verbo=0) at ../../gdb/symfile.c:767
#15 0x080fbcd1 in symbol_file_add_with_addrs_or_offsets (abfd=0x0, from_tty=0, addrs=0x8ce1b98, offsets=0x315f534e,
    num_offsets=828330830, mainline=0, flags=8) at ../../gdb/symfile.c:918
#16 0x080fbe09 in symbol_file_add_from_bfd (abfd=0x315f534e, from_tty=828330830, addrs=0x315f534e, mainline=828330830, flags=828330830)
    at ../../gdb/symfile.c:938
#17 0x08093015 in symbol_add_stub (arg=0x8cef200) at ../../gdb/solib.c:365
#18 0x080842e1 in do_catch_errors (uiout=0x82ee448, data=0x315f534e) at ../../gdb/top.c:524
#19 0x08084160 in catcher (func=0x80842d0 <do_catch_errors>, func_uiout=0x82ee448, func_args=0xbfffb900, func_val=0xbfffb8f8,
    func_caught=0xbfffb8fc, errstring=0x315f534e <Address 0x315f534e out of bounds>, gdberrmsg=0x0, mask=6) at ../../gdb/top.c:431
#20 0x08084340 in catch_errors (func=0x315f534e, func_args=0x315f534e, errstring=0x315f534e <Address 0x315f534e out of bounds>,
    mask=828330830) at ../../gdb/top.c:536
#21 0x08093361 in solib_add (pattern=0x0, from_tty=0, target=0x315f534e, readsyms=1) at ../../gdb/solib.c:596
#22 0x081099cc in handle_inferior_event (ecs=0xbfffba70) at ../../gdb/infrun.c:2116
#23 0x08108859 in wait_for_inferior () at ../../gdb/infrun.c:991
#24 0x08108665 in proceed (addr=0, siggnal=TARGET_SIGNAL_0, step=0) at ../../gdb/infrun.c:814
#25 0x0807e843 in find_default_create_inferior (
    exec_file=0xa937648 "IS2_EEEENS_17__normal_iteratorIT_T1_E15difference_typeERKSB_RKNS8_IT0_SA_EE",
    allargs=0xa937648 "IS2_EEEENS_17__normal_iteratorIT_T1_E15difference_typeERKSB_RKNS8_IT0_SA_EE", env=0xa937648, from_tty=177436232)
    at ../../gdb/target.c:1516
#26 0x081053dd in run_command (args=0x0, from_tty=1) at ../../gdb/infcmd.c:481
#27 0x080b6139 in do_cfunc (c=0x315f534e, args=0x315f534e <Address 0x315f534e out of bounds>, from_tty=828330830)
    at ../../gdb/cli/cli-decode.c:57
#28 0x080b818c in cmd_func (cmd=0x82d2548, args=0x315f534e <Address 0x315f534e out of bounds>, from_tty=828330830)
    at ../../gdb/cli/cli-decode.c:1599
#29 0x080846bd in execute_command (p=0x82b53e9 "", from_tty=1) at ../../gdb/top.c:733
#30 0x08115f5f in command_handler (command=0x82b53e8 "") at ../../gdb/event-top.c:500
---Type <return> to continue, or q <return> to quit---
#31 0x081163a5 in command_line_handler (rl=0xc75dc98 "\210Üu\f") at ../../gdb/event-top.c:793
#32 0x081f7115 in rl_callback_read_char () at ../../readline/callback.c:123
#33 0x081158ab in rl_callback_read_char_wrapper (client_data=0x0) at ../../gdb/event-top.c:166
#34 0x08115e5a in stdin_event_handler (error=0, client_data=0x315f534e) at ../../gdb/event-top.c:416
#35 0x0811513e in handle_file_event (event_file_desc=177436232) at ../../gdb/event-loop.c:721
#36 0x08114bf9 in process_event () at ../../gdb/event-loop.c:334
#37 0x08114c58 in gdb_do_one_event (data=0x0) at ../../gdb/event-loop.c:371
#38 0x080842e1 in do_catch_errors (uiout=0x82ee448, data=0x315f534e) at ../../gdb/top.c:524
#39 0x08084160 in catcher (func=0x80842d0 <do_catch_errors>, func_uiout=0x82ee448, func_args=0xbfffbe30, func_val=0xbfffbe28,
    func_caught=0xbfffbe2c, errstring=0x315f534e <Address 0x315f534e out of bounds>, gdberrmsg=0x0, mask=6) at ../../gdb/top.c:431
#40 0x08084340 in catch_errors (func=0x315f534e, func_args=0x315f534e, errstring=0x315f534e <Address 0x315f534e out of bounds>,
    mask=828330830) at ../../gdb/top.c:536
#41 0x080c4b44 in tui_command_loop (data=0x0) at ../../gdb/tui/tui-interp.c:150
#42 0x08112963 in current_interp_command_loop () at ../../gdb/interps.c:277
#43 0x0807b0db in captured_command_loop (data=0x0) at ../../gdb/main.c:91
#44 0x080842e1 in do_catch_errors (uiout=0x82ee448, data=0x315f534e) at ../../gdb/top.c:524
#45 0x08084160 in catcher (func=0x80842d0 <do_catch_errors>, func_uiout=0x82ee448, func_args=0xbfffbfc0, func_val=0xbfffbfb8,
    func_caught=0xbfffbfbc, errstring=0x315f534e <Address 0x315f534e out of bounds>, gdberrmsg=0x0, mask=6) at ../../gdb/top.c:431
#46 0x08084340 in catch_errors (func=0x315f534e, func_args=0x315f534e, errstring=0x315f534e <Address 0x315f534e out of bounds>,
    mask=828330830) at ../../gdb/top.c:536
#47 0x0807baa4 in captured_main (data=0x0) at ../../gdb/main.c:801
#48 0x080842e1 in do_catch_errors (uiout=0x8294c80, data=0x315f534e) at ../../gdb/top.c:524
#49 0x08084160 in catcher (func=0x80842d0 <do_catch_errors>, func_uiout=0x8294c80, func_args=0xbfffc280, func_val=0xbfffc278,
    func_caught=0xbfffc27c, errstring=0x315f534e <Address 0x315f534e out of bounds>, gdberrmsg=0x0, mask=6) at ../../gdb/top.c:431
#50 0x08084340 in catch_errors (func=0x315f534e, func_args=0x315f534e, errstring=0x315f534e <Address 0x315f534e out of bounds>,
    mask=828330830) at ../../gdb/top.c:536
#51 0x0807bf43 in gdb_main (args=0xa937648) at ../../gdb/main.c:810
#52 0x0807b0be in main (argc=828330830, argv=0x315f534e) at ../../gdb/gdb.c:35

(gdb) info locals
orig_type = (struct type *) 0x315f534e
is_const = 1
is_volatile = 29779

(gdb) p *type
Cannot access memory at address 0x315f534e
>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: