{"action":"created","issue":{"url":"https://api.github.com/repos/dart-lang/sdk/issues/25222","labels_url":"https://api.github.com/repos/dart-lang/sdk/issues/25222/labels{/name}","comments_url":"https://api.github.com/repos/dart-lang/sdk/issues/25222/comments","events_url":"https://api.github.com/repos/dart-lang/sdk/issues/25222/events","html_url":"https://github.com/dart-lang/sdk/issues/25222","id":121553578,"number":25222,"title":"Heap-use-after-free on isolate creation","user":{"login":"fsc8000","id":2890421,"avatar_url":"https://avatars.githubusercontent.com/u/2890421?v=3","gravatar_id":"","url":"https://api.github.com/users/fsc8000","html_url":"https://github.com/fsc8000","followers_url":"https://api.github.com/users/fsc8000/followers","following_url":"https://api.github.com/users/fsc8000/following{/other_user}","gists_url":"https://api.github.com/users/fsc8000/gists{/gist_id}","starred_url":"https://api.github.com/users/fsc8000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fsc8000/subscriptions","organizations_url":"https://api.github.com/users/fsc8000/orgs","repos_url":"https://api.github.com/users/fsc8000/repos","events_url":"https://api.github.com/users/fsc8000/events{/privacy}","received_events_url":"https://api.github.com/users/fsc8000/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/dart-lang/sdk/labels/area-vm","name":"area-vm","color":"c7def8"}],"state":"closed","locked":false,"assignee":{"login":"fsc8000","id":2890421,"avatar_url":"https://avatars.githubusercontent.com/u/2890421?v=3","gravatar_id":"","url":"https://api.github.com/users/fsc8000","html_url":"https://github.com/fsc8000","followers_url":"https://api.github.com/users/fsc8000/followers","following_url":"https://api.github.com/users/fsc8000/following{/other_user}","gists_url":"https://api.github.com/users/fsc8000/gists{/gist_id}","starred_url":"https://api.github.com/users/fsc8000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fsc8000/subscriptions","organizations_url":"https://api.github.com/users/fsc8000/orgs","repos_url":"https://api.github.com/users/fsc8000/repos","events_url":"https://api.github.com/users/fsc8000/events{/privacy}","received_events_url":"https://api.github.com/users/fsc8000/received_events","type":"User","site_admin":false},"milestone":null,"comments":4,"created_at":"2015-12-10T18:56:34Z","updated_at":"2016-01-19T23:11:59Z","closed_at":"2016-01-19T23:11:59Z","body":"Maybe related to #25211 ?\r\n\r\nRepro:\r\n1. Build with clang -fsanitize=thread\r\n2.\r\n```\r\nout/DebugX64/dart --ignore-unrecognized-flags --package-root=out/DebugX64/packages/ /media/SSD/dartgit2/sdk/tests/co19/src/LibTest/isolate/Isolate/spawnUri_A02_t01.dart\r\n```\r\n\r\n```\r\n==================\r\nWARNING: ThreadSanitizer: heap-use-after-free (pid=9018)\r\n  Read of size 8 at 0x7d080000c120 by thread T4:\r\n    #0 strlen /usr/local/google/work/chromium/src/third_party/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors.cc:584 (exe+0x00000027541a)\r\n    #1 dart::bin::DartUtils::NewString(char const*) /media/SSD/dartgit2/sdk/runtime/bin/dartutils.h:177 (exe+0x000000309544)\r\n    #2 dart::bin::DartUtils::PrepareForScriptLoading(char const*, char const**, char const*, bool, bool, _Dart_Handle*) /media/SSD/dartgit2/sdk/runtime/bin/dartutils.cc:822 (exe+0x000000309c07)\r\n    #3 dart::bin::CreateIsolateAndSetupHelper(char const*, char const*, char const*, char const**, char const*, Dart_IsolateFlags*, char**, int*) /media/SSD/dartgit2/sdk/runtime/bin/main.cc:742 (exe+0x0000002c4495)\r\n    #4 dart::bin::CreateIsolateAndSetup(char const*, char const*, char const*, char const**, Dart_IsolateFlags*, void*, char**) /media/SSD/dartgit2/sdk/runtime/bin/main.cc:826 (exe+0x0000002c5765)\r\n    #5 dart::SpawnIsolateTask::Run() /media/SSD/dartgit2/sdk/runtime/lib/isolate.cc:152 (exe+0x0000009bcee3)\r\n    #6 dart::ThreadPool::Worker::Loop() /media/SSD/dartgit2/sdk/runtime/vm/thread_pool.cc:385 (exe+0x000000782256)\r\n    #7 dart::ThreadPool::Worker::Main(unsigned long) /media/SSD/dartgit2/sdk/runtime/vm/thread_pool.cc:440 (exe+0x000000782086)\r\n    #8 dart::ThreadStart(void*) /media/SSD/dartgit2/sdk/runtime/vm/os_thread_linux.cc:105 (exe+0x000000613003)\r\n\r\n  Previous write of size 8 at 0x7d080000c120 by main thread:\r\n    [failed to restore the stack]\r\n\r\n  Location is heap block of size 25 at 0x7d080000c120 allocated by main thread:\r\n    #0 malloc /usr/local/google/work/chromium/src/third_party/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors.cc:448 (exe+0x000000274143)\r\n    #1 IsolateData /media/SSD/dartgit2/sdk/runtime/bin/isolate_data.h:34 (exe+0x0000002c42b6)\r\n    #2 dart::bin::RunMainIsolate(char const*, dart::bin::CommandLineOptions*) /media/SSD/dartgit2/sdk/runtime/bin/main.cc:1107 (exe+0x0000002c3ac0)\r\n    #3 dart::bin::main(int, char**) /media/SSD/dartgit2/sdk/runtime/bin/main.cc:1387 (exe+0x0000002c51f0)\r\n    #4 main /media/SSD/dartgit2/sdk/runtime/bin/main.cc:1426 (exe+0x0000002c5b5e)\r\n\r\n  Thread T4 (tid=9025, running) created by thread T3 at:\r\n    #0 pthread_create /usr/local/google/work/chromium/src/third_party/llvm/projects/compiler-rt/lib/tsan/rtl/tsan_interceptors.cc:855 (exe+0x000000277a52)\r\n    #1 dart::OSThread::Start(char const*, void (*)(unsigned long), unsigned long) /media/SSD/dartgit2/sdk/runtime/vm/os_thread_linux.cc:124 (exe+0x000000612f19)\r\n    #2 dart::ThreadPool::Worker::StartThread() /media/SSD/dartgit2/sdk/runtime/vm/thread_pool.cc:340 (exe+0x000000781585)\r\n    #3 dart::MessageHandler::Run(dart::ThreadPool*, dart::MessageHandler::MessageStatus (*)(unsigned long), void (*)(unsigned long), unsigned long) /media/SSD/dartgit2/sdk/runtime/vm/message_handler.cc:119 (exe+0x0000005349d6)\r\n    #4 dart::RunServiceTask::Run() /media/SSD/dartgit2/sdk/runtime/vm/service_isolate.cc:335 (exe+0x00000074ea7f)\r\n    #5 dart::ThreadPool::Worker::Loop() /media/SSD/dartgit2/sdk/runtime/vm/thread_pool.cc:385 (exe+0x000000782256)\r\n    #6 dart::ThreadPool::Worker::Main(unsigned long) /media/SSD/dartgit2/sdk/runtime/vm/thread_pool.cc:440 (exe+0x000000782086)\r\n    #7 dart::ThreadStart(void*) /media/SSD/dartgit2/sdk/runtime/vm/os_thread_linux.cc:105 (exe+0x000000613003)\r\n\r\nSUMMARY: ThreadSanitizer: heap-use-after-free /media/SSD/dartgit2/sdk/runtime/bin/dartutils.h:177 dart::bin::DartUtils::NewString(char const*)\r\n==================\r\n```"},"comment":{"url":"https://api.github.com/repos/dart-lang/sdk/issues/comments/173018292","html_url":"https://github.com/dart-lang/sdk/issues/25222#issuecomment-173018292","issue_url":"https://api.github.com/repos/dart-lang/sdk/issues/25222","id":173018292,"user":{"login":"fsc8000","id":2890421,"avatar_url":"https://avatars.githubusercontent.com/u/2890421?v=3","gravatar_id":"","url":"https://api.github.com/users/fsc8000","html_url":"https://github.com/fsc8000","followers_url":"https://api.github.com/users/fsc8000/followers","following_url":"https://api.github.com/users/fsc8000/following{/other_user}","gists_url":"https://api.github.com/users/fsc8000/gists{/gist_id}","starred_url":"https://api.github.com/users/fsc8000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fsc8000/subscriptions","organizations_url":"https://api.github.com/users/fsc8000/orgs","repos_url":"https://api.github.com/users/fsc8000/repos","events_url":"https://api.github.com/users/fsc8000/events{/privacy}","received_events_url":"https://api.github.com/users/fsc8000/received_events","type":"User","site_admin":false},"created_at":"2016-01-19T23:11:59Z","updated_at":"2016-01-19T23:11:59Z","body":"This seems fixed now."}}