AVR Downloader/UploaDEr - Bugs: bug #48776, avrdude attempts to free() an...
You are not allowed to post comments on this tracker with your current authentication level.
bug #48776: avrdude attempts to free() an invalid address
Submitter: | Esot.Eric <esot_eric> | ||
Submitted: | Sun 14 Aug 2016 01:40:35 AM UTC | ||
Category: | None | Severity: | 6 - Security |
Priority: | 5 - Normal | Item Group: | None |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | esot_eric |
Open/Closed: | Open | Release: | 6.3 |
Programmer hardware: | Device type: |
Jump to the original submission
Sat 11 Apr 2020 04:49:30 PM UTC, comment #10: |
Dima <dimecho> |
Thu 01 Feb 2018 10:34:34 PM UTC, comment #9: After rebooting, the problem seems to have disappeared completely. |
The Lightning Stalker <lightningstalker> |
Fri 26 Jan 2018 10:07:10 AM UTC, comment #8: Sure thing
|
The Lightning Stalker <lightningstalker> |
Thu 25 Jan 2018 08:40:52 PM UTC, comment #7: @lightningstalker Can you send the command line you used? The problem I found depends on part specific sizes and the fact I had to fix it in more than one place means I could have missed some of them or it needs to be fixed in some common code path. |
Kārlis Seņko <karliss> |
Thu 25 Jan 2018 03:58:53 PM UTC, comment #6: @karliss That patch does not fix the error on my system. At least it writes the file out before it crashes though. |
The Lightning Stalker <lightningstalker> |
Sat 09 Sep 2017 05:51:04 PM UTC, comment #5: Here is a patch I use.
|
Kārlis Seņko <karliss> |
Fri 25 Aug 2017 01:43:54 AM UTC, comment #4: I just encountered this problem as well in avrdude 6.3-2; here's a stack trace and memory map, in case you want it.
|
Charlie Green <bytesquid> |
Sun 28 May 2017 12:09:37 PM UTC, comment #3: I think I found the problem. In usbtiny_page_load chunk_size was 128 but n_bytes 64. This could result in buffer overflow corrupting memory and causing free to fail. Limiting the chunk size fixed the crash. |
Kārlis Seņko <karliss> |
Sat 24 Sep 2016 02:47:09 AM UTC, comment #2: Cool, thanks for looking into this!
|
Esot.Eric <esot_eric> |
Tue 13 Sep 2016 08:02:44 PM UTC, comment #1: Well, my major problem I'm having with this bug report is, I
|
Joerg Wunsch <joerg_wunsch> |
Sun 14 Aug 2016 01:40:35 AM UTC, original submission:
READING the flash into an ihex file: AVR-Dude crashes with:
* Tried later with ATtiny861, same problem. (also with eeprom-read)
* Tried later with v6.3, same problem.
* Tried later with FT2232H-based programmer, NO PROBLEM.
|
Esot.Eric <esot_eric> |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
Follow 2 latest changes.
Date | Changed by | Updated Field | Previous Value | => | Replaced by |
---|---|---|---|---|---|
2016-09-13 | joerg_wunsch | Release | None | 6.3 | |
2016-09-13 | joerg_wunsch | Severity | 3 - Normal | 6 - Security |
Powered by Savane 3.13-d3ae.
Corresponding source code
I have experienced the same bug and the provided patch fully fixed the issue! Thank you Kārlis Seņko.
Will this patch be considered as part of next production? I think it should.
My setup is USBtiny (firmware "v-usb" v1.04) running on attiny85.
$ avrdude -pt13 -cusbtiny -Uflash:w:main.hex:i