Date: Mon, 31 Dec 2007 11:32:03 -0800 From: Jason Evans <jasone@freebsd.org> To: Markus Hoenicka <markus.hoenicka@mhoenicka.de> Cc: freebsd-hackers@freebsd.org Subject: Re: dlopen(), atexit() crash on FreeBSD (testcase included) Message-ID: <477943B3.5080605@freebsd.org> In-Reply-To: <18297.6718.750894.937199@yeti.mininet> References: <18297.6718.750894.937199@yeti.mininet>
next in thread | previous in thread | raw e-mail | index | archive | help
Markus Hoenicka wrote: > I've been redirected by Giorgos Keramidas to this list after reporting > a problem on the freebsd-questions list. I'd greatly appreciate if you > could have a look at the following problem. Apparently programs are > doomed to segfault on FreeBSD if dlopen()ed modules install exit > handlers via atexit(). Similar problem reports have cropped up before, It seems to me that you should *expect* a crash under the circumstances you describe. You are dlopen()ing a module, saving a pointer to a function within that module, unloading the module, then trying to call a function that is no longer mapped. The only way this could possibly work is if dlclose() doesn't really unmap the module. It is up to the programmer to avoid dangling pointers to unmapped modules. There are all sorts of variations on this bug, such as storing a pointer to a const string. You have to be really careful to be able to safely dlclose() a module. Jason
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?477943B3.5080605>