Bug ID 1726
Summary possible overrun bugs in soring found with LTO
Product DPDK
Version unspecified
Hardware All
OS All
Status UNCONFIRMED
Severity normal
Priority Normal
Component other
Assignee dev@dpdk.org
Reporter stephen@networkplumber.org
Target Milestone ---

Enabling LTO in build allows compiler to detect more bugs such as out of bounds
references inside libraries. Several warnings in soring

In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 128 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 160 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 192 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 224 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 256 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 288 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 320 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 352 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 384 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 416 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 448 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |                  ^
In function ‘__rte_ring_dequeue_elems_128’,
    inlined from ‘__rte_ring_do_dequeue_elems’ at
../lib/ring/rte_ring_elem_pvt.h:279:3,
    inlined from ‘soring_dequeue’ at ../lib/ring/soring.c:315:3,
    inlined from ‘rte_soring_dequeue_bulk’ at ../lib/ring/soring.c:552:9,
    inlined from ‘test_soring_stages’ at ../app/test/test_soring.c:181:14:
../lib/ring/rte_ring_elem_pvt.h:250:25: warning: writing 32 bytes into a region
of size 0 [-Wstringop-overflow=]
  250 |                         memcpy((obj + i), (const void *)(ring + idx),
32);
      |                         ^
../app/test/test_soring.c: In function ‘test_soring_stages’:
../app/test/test_soring.c:157:18: note: at offset 480 into destination object
‘dequeued_objs’ of size 128
  157 |         uint32_t dequeued_objs[32];
      |
          


You are receiving this mail because: