What you are seeing is a warning that your compiler may have found a use-after-free bug, but I think this is a false positive. Your build is configured to turn this warning into a hard error.
How to fix it?
I think it will be difficult to know how to fix this without knowing more about your build setup. Are you passing any custom CFLAGS? What compiler and version are you using?
Also, here is someone asking about the same issue (in the same code) on Stack Exchange using GGC 12.1:
No objections to your answer to the OP’s question, but as a curiosity, I’m trying to figure out what the original xrealloc() function is trying to do.
So far as I can tell, it tries a normal realloc() with the requested size, but if that fails, tries again with size=1. But strangely, it that fails, tries using the requested size a second time. And if that still fails, tries once more with size=1.
The POSIX man page isn’t giving me any hints as to why size=1 might be special, or if this is some sort of Linux-specific behavior or workaround. I wondered if you might have some insight why this function is the way it is.
Note: I’m on mobile, so haven’t checked the Git Blame history yet.
I think it will be difficult to know how to fix this without knowing more about your build setup. Are you passing any custom CFLAGS? What compiler and version are you using?
This would normally be a compiler warning, but someone has enabled the -Werror compiler option (probably in the makefile) which causes the compiler to treat all warnings as errors. You can just remove any -Werror flags from the makefile and it should compile properly.
Also, make sure you have the latest version of GCC, because I remember it yielding many false-positives when I was implementing some reference counting (which obviously is prone to false positives in static analysis) and those warnings disappeared after updating the compiler.
EDIT: from the looks of it GCC’s “static analysis” basically assumed the worst case (ie that the first realloc is freeing memory and the second one is allocating new memory elsewhere and is copying from the old pointer, thus accessing it and hence the use-after-free warning). You can probably just remove the warning as the others have suggested, or you could try to downgrade GCC to version 11 as many of the search results regarding those use-after-free warnings involve later versions.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programming@programming.dev
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person’s post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Rules
Follow the programming.dev instance rules
Keep content related to programming in some way
If you’re posting long videos try to add in some form of tldr for those who don’t want to watch videos
The code hitting that error is here:
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes.git/tree/tools/lib/subcmd/subcmd-util.h
It looks fine to me.
What you are seeing is a warning that your compiler may have found a use-after-free bug, but I think this is a false positive. Your build is configured to turn this warning into a hard error.
I think it will be difficult to know how to fix this without knowing more about your build setup. Are you passing any custom CFLAGS? What compiler and version are you using?
Also, here is someone asking about the same issue (in the same code) on Stack Exchange using GGC 12.1:
https://unix.stackexchange.com/questions/709671/linux-kernel-5-15-54-compilation-errors-with-gcc-12-1
This was the top result when Googling
linux "-Werror=use-after-free".I believe you can disable this warning in this file by adding a pragma after the includes (line 8):
See https://stackoverflow.com/questions/925179/selectively-remove-a-warning-message-using-gcc
Edit: If you don’t want to change the code, try disabling the use-after-free warning from the make call:
No objections to your answer to the OP’s question, but as a curiosity, I’m trying to figure out what the original xrealloc() function is trying to do.
So far as I can tell, it tries a normal realloc() with the requested size, but if that fails, tries again with size=1. But strangely, it that fails, tries using the requested size a second time. And if that still fails, tries once more with size=1.
The POSIX man page isn’t giving me any hints as to why size=1 might be special, or if this is some sort of Linux-specific behavior or workaround. I wondered if you might have some insight why this function is the way it is.
Note: I’m on mobile, so haven’t checked the Git Blame history yet.
So
realloc(ptr, 1)only happens when!ret && !sizei.e. the call failed andsize == 0.Presumably this is to support a size of zero even when the underlying realloc does not.
The code is duplicated to try the realloc twice before failing.
I’m not sure what the use case of zero size is though.
No.
The goal - simply compile it for now.
If you don’t want to change the code, try disabling the use-after-free warning from the make call:
This would normally be a compiler warning, but someone has enabled the
-Werrorcompiler option (probably in the makefile) which causes the compiler to treat all warnings as errors. You can just remove any-Werrorflags from the makefile and it should compile properly.will try
What revision are you using? Because I don’t see the(EDIT: my bad, it’s in the subcmd-util.h file linked in the other comment)ret = realloc(ptr, 1);line in https://github.com/torvalds/linux/blob/master/tools/lib/subcmd/subcmd-util.h .Also, make sure you have the latest version of GCC, because I remember it yielding many false-positives when I was implementing some reference counting (which obviously is prone to false positives in static analysis) and those warnings disappeared after updating the compiler.
EDIT: from the looks of it GCC’s “static analysis” basically assumed the worst case (ie that the first realloc is freeing memory and the second one is allocating new memory elsewhere and is copying from the old pointer, thus accessing it and hence the use-after-free warning). You can probably just remove the warning as the others have suggested, or you could try to downgrade GCC to version 11 as many of the search results regarding those use-after-free warnings involve later versions.