Occasional SIGSEV Segmentation fault on analysis

[a-st]

I ran this command:

fsrt .

I expected this to happen: Successful analysis of the project

Instead, this happened: SIGSEV Segmentation fault

I ran fsrt on this app:

fsrt --version:

fsrt 0.1.0

Backtrace

(No debugging symbols found in ./fsrt)
[New LWP 287602]
Core was generated by `./fsrt .'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007724c8747001 in <smallvec::SmallVec<A> as core::iter::traits::collect::Extend<<A as smallvec::Array>::Item>>::extend ()

coredumpctl dump

           PID: 302807 (fsrt)
           UID: 1000 (a-st)
           GID: 1000 (a-st)
        Signal: 11 (SEGV)
     Timestamp: Mon 2025-05-12 12:18:24 CEST (2min 26s ago)
  Command Line: ./fsrt .
    Executable: ./fsrt
 Control Group: /user.slice/user-1000.slice/session-13.scope
          Unit: session-13.scope
         Slice: user-1000.slice
       Session: 13
     Owner UID: 1000 (a-st)
       Boot ID: 49f2dec5c2c4491bb04d57f1b3f2e4ce
    Machine ID: 1765dbb790d94cacb8834804c4883216
      Hostname: ROSS
       Storage: /var/lib/systemd/coredump/core.fsrt.1000.49f2dec5c2c4491bb04d57f1b3f2e4ce.302807.1747045104000000.zst (present)
  Size on Disk: 3.6M
       Message: Process 302807 (fsrt) of user 1000 dumped core.
                
                Stack trace of thread 302807:
                #0  0x0000790b92347009 _ZN133_$LT$smallvec..SmallVec$LT$A$GT$$u20$as$u20$core..iter..traits..collect..Extend$LT$$LT$A$u20$as$u20$smallvec..Array$GT$..Item$GT$$GT$6extend17hf185570d6430a1acE (./fsrt + 0x347009)
                #1  0x0000790b9235d6f3 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d6f3)
                #2  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #3  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #4  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #5  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #6  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #7  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #8  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #9  0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #10 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #11 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #12 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #13 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #14 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #15 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #16 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #17 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #18 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #19 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #20 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #21 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #22 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #23 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #24 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #25 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #26 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #27 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #28 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #29 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #30 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #31 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #32 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #33 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #34 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #35 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #36 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #37 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #38 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #39 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #40 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #41 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #42 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #43 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #44 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #45 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #46 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #47 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #48 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #49 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #50 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #51 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #52 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #53 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #54 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #55 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #56 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #57 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #58 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #59 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #60 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #61 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #62 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                #63 0x0000790b9235d853 _ZN14forge_analyzer6interp12ValueManager23get_var_with_projection17hc0eb2eb2c3054346E (./fsrt + 0x35d853)
                ELF object binary architecture: AMD x86-64

[a-st]

As shown in coredumpctl dump the code seems to run into some endless loop caused by the recursive call at

FSRT/crates/forge_analyzer/src/interp.rs

Line 452 in 07ff895

self.get_var_with_projection(def_id_func, *var_id, projection_vec)

[a-st]

Did a different run and got some different result:

    DEBUG Dataflow: getIssueTypeScheme - bb0
    DEBUG Dataflow: dueDateChangeHandler - bb4
    DEBUG Dataflow: dueDateChangeHandler - bb3
    DEBUG Found call to deleteIssueProperties at DefId(481) dueDateChangeHandler
    DEBUG Found call to deleteIssueProperties at DefId(481) dueDateChangeHandler
    DEBUG Dataflow: dueDateChangeHandler - bb2
    DEBUG Dataflow: dueDateChangeHandler - bb1

thread 'main' has overflowed its stack
fatal runtime error: stack overflow
zsh: IOT instruction (core dumped)  FORGE_LOG=trace RUST_LOG=trace RUST_BACKTRACE=full cargo run -p fsrt

[a-st]

This issue currently prevents us from using the FSRT.

@jwong101 any chance you can take a look into that?

[jwong101]

Sorry about that!

Do you have any example code that I can use to reproduce the stack overflow? If it's on an existing marketplace app, you could also send me the app key, and I can look at it.

[a-st]

No worries, everyone is busy with their daily tasks 👍

Yet I didn't manage to create a sample project which reproduces the issue, but I'll try to get something set up.

The app key is ari:cloud:ecosystem::app/959dce8c-feba-47aa-b630-c7ad0de9912a

Thanks a lot in advance!

[jwong101]

Thanks! I'll take a look at this this week.

[a-st]

Hey @jwong101 did you manage to look into this issue yet?