bug#68350: Segmentation fault using list-head with negative k

bug#68350: Segmentation fault using list-head with negative k

[Tomas Nordin]

Hello List

If this has been reported before I didn't find it. Here's the recipe:

$ guile -q
GNU Guile 3.0.8
Copyright (C) 1995-2021 Free Software Foundation, Inc.

Guile comes with ABSOLUTELY NO WARRANTY; for details type `,show w'.
This program is free software, and you are welcome to redistribute it
under certain conditions; type `,show c' for details.

Enter `,help' for help.
scheme@(guile-user)> (list-head '(1 2 3) -1)
Segmentation fault

Argument -1 is an improper argument and an error is expected, but not a
segmentation fault.

With positive integers out of bounds I see an exception, not segfault.

This is an apt-installed guile on Debian

$ dpkg -l | grep guile
ii  guile-3.0                               3.0.8-2                                      amd64        GNU extension language and Scheme interpreter
ii  guile-3.0-doc                           3.0.8-2                                      all          Documentation for Guile 3.0
ii  guile-3.0-libs:amd64                    3.0.8-2                                      amd64        Core Guile libraries

Thanks for all the work

--
Tomas

bug#68350: Segmentation fault using list-head with negative k

[Ricardo Wurmus]

Hi,

Tomas Nordin <tomasn@posteo.net> writes:

> $ guile -q
> GNU Guile 3.0.8
> Copyright (C) 1995-2021 Free Software Foundation, Inc.
>
> Guile comes with ABSOLUTELY NO WARRANTY; for details type `,show w'.
> This program is free software, and you are welcome to redistribute it
> under certain conditions; type `,show c' for details.
>
> Enter `,help' for help.
> scheme@(guile-user)> (list-head '(1 2 3) -1)
> Segmentation fault

I cannot reproduce this with Guile 3.0.9 on Guix:

--8<---------------cut here---------------start------------->8---
$ guile
GNU Guile 3.0.9
Copyright (C) 1995-2023 Free Software Foundation, Inc.

Guile comes with ABSOLUTELY NO WARRANTY; for details type `,show w'.
This program is free software, and you are welcome to redistribute it
under certain conditions; type `,show c' for details.

Enter `,help' for help.
scheme@(guile-user)> (list-head '(1 2 3) -1)
ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Value out of range 0 to< 18446744073709551615: -1

Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.
scheme@(guile-user) [1]> 
--8<---------------cut here---------------end--------------->8---


-- 
Ricardo

bug#68350: Segmentation fault using list-head with negative k

[lloda]

I think this is another dupe of https://debbugs.gnu.org/58154.

bug#68350: Segmentation fault using list-head with negative k

[Tomas Nordin]

lloda <lloda@sarc.name> writes:

> I think this is another dupe of https://debbugs.gnu.org/58154.

Highly possible. Like Ricardo I cannot reproduce this with a local build
I made from the tip of the repo. (I saw the same segfault using list-ref
with the debian 3.0.8 version FWIW.)

--
Tomas

bug#68350: Segmentation fault using list-head with negative k

[lloda]

> On 11 Jan 2024, at 18:57, Tomas Nordin <tomasn@posteo.net> wrote:
> 
> lloda <lloda@sarc.name> writes:
> 
>> I think this is another dupe of https://debbugs.gnu.org/58154.
> 
> Highly possible. Like Ricardo I cannot reproduce this with a local build
> I made from the tip of the repo. (I saw the same segfault using list-ref
> with the debian 3.0.8 version FWIW.)

I looked it up and it is indeed the same bug. It's fixed in 3.0.9.

Thanks for the report!