boost :: spirit :: hold_any内存损坏

问题描述

我有一个大型代码库，可以使用或（取决于宏定义）。

I have a large code base that can use boost::any or boost::spirit::hold_any (depending on a macro definition).

hold_any boost :: any （例如或 ）和更快（），但我遇到了几个分段错误使用 hold_any （Boost v1.55 / 1.54 / 1.53）。

hold_any seems to be compatible with boost::any (e.g. How to print boost::any to a stream? or Type erasure - Part IV) and faster (Why you shouldn’t use boost::any) but I'm experiencing several segmentation fault errors using hold_any (Boost v1.55 / 1.54 / 1.53).

这是一个最小的工作示例，表现出与原始代码相同的问题：

This is a minimal working example that exhibits the same problem as the original code:

#include <iostream>
#include <string>
#include <vector>

#include <boost/spirit/home/support/detail/hold_any.hpp>

typedef boost::spirit::hold_any any;
typedef std::vector<any> vany;

int main()
{
  vany data0, data1;

  for (unsigned i(0); i < 1000; ++i)
  {
    std::string s("test_test_test");
    data0.push_back(any(s));
  }

  const unsigned n(data0.size());
  vany::iterator iter(data0.begin());

  for (unsigned i(0); i < n; ++i)
  {
    std::cout << "Moving " << i << std::endl;

    data1.push_back(*iter);
    iter = data0.erase(iter);
  }

  return 0;
}

程序似乎工作正常：

• 从 boost :: spirit :: hold_any 更改为 boost :: any ;


• 将 hold_any 的内容更改为小到足以执行小缓冲区优化的数据类型c $ c> std :: string 至 int ）。

• changing from boost::spirit::hold_any to boost::any;
• changing the content of the hold_any to a data type small enough to perform small buffer optimization (e.g. from std::string to int).

似乎很奇怪，在一个广泛使用的库，如Boost Spirit，可能有一些重大的错误，但

It seems strange that there could be some major bug in a widely used library such as Boost Spirit, but

• m在示例中很难找到错误;


• 我尝试过g ++ / clang ++但未成功。

该示例有什么问题？

推荐答案

您应该 code> hold_any ，因为它在 detail / hold_any.hpp 中的原因。

You should not be using hold_any as it is in detail/hold_any.hpp for a reason.

也就是说， hold_any 的副本分配似乎被打破了。我已在建议中创建 修复。

That said, hold_any's copy-assignment appears to be broken. I've created a pull request on github with a proposed fix.

没有修复，下面的程序演示UB（因为编译器生成一个浅的赋值操作符，首选）：

Without the fix, the following program demonstrates UB (because the compiler generates a shallow assignment operator which is preferred):

#include <iostream>
#include <string>

#include <boost/spirit/home/support/detail/hold_any.hpp>

typedef boost::spirit::hold_any any;

int main()
{
    any b;
    {
        any a;
        a = std::string("test_test_test");
        b = a;
    }

    std::cout << "b: " << b << '\n';
}

在valgrind下运行时：

When run under valgrind:

==11827== Invalid read of size 8
==11827==    at 0x5E9D793: std::basic_ostream<char, std::char_traits<char> >& std::operator<< <char, std::char_traits<char>, std::allocator<char> >(std::basic_ostream<char, std::char_traits<char> >&, std::basic_string<char, std
==11827==    by 0x4012FC: boost::spirit::detail::fxns<mpl_::bool_<true> >::type<std::string, char>::stream_out(std::ostream&, void* const*) (hold_any.hpp:113)
==11827==    by 0x4010F5: std::basic_ostream<char, std::char_traits<char> >& boost::spirit::operator<< <char>(std::basic_ostream<char, std::char_traits<char> >&, boost::spirit::basic_hold_any<char> const&) (hold_any.hpp:368)
==11827==    by 0x400FC9: main (test.cpp:17)
==11827==  Address 0x8ac1650 is 0 bytes inside a block of size 39 free'd
==11827==    at 0x4C2BADC: operator delete(void*) (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==11827==    by 0x5EC405E: std::basic_string<char, std::char_traits<char>, std::allocator<char> >::~basic_string() (in /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.18)
==11827==    by 0x401204: boost::spirit::detail::fxns<mpl_::bool_<true> >::type<std::string, char>::static_delete(void**) (hold_any.hpp:89)
==11827==    by 0x401328: boost::spirit::basic_hold_any<char>::~basic_hold_any() (hold_any.hpp:246)
==11827==    by 0x4010B4: boost::spirit::basic_hold_any<char>::~basic_hold_any() (hold_any.hpp:245)
==11827==    by 0x400FA0: main (test.cpp:15)

这篇关于boost :: spirit :: hold_any内存损坏的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！