diff options
Diffstat (limited to 'results/classifier/105/instruction/2466')
| -rw-r--r-- | results/classifier/105/instruction/2466 | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/results/classifier/105/instruction/2466 b/results/classifier/105/instruction/2466 new file mode 100644 index 00000000..e13bb7f4 --- /dev/null +++ b/results/classifier/105/instruction/2466 @@ -0,0 +1,37 @@ +instruction: 0.900 +other: 0.803 +graphic: 0.794 +semantic: 0.757 +assembly: 0.709 +device: 0.665 +vnc: 0.645 +network: 0.592 +mistranslation: 0.473 +socket: 0.465 +KVM: 0.463 +boot: 0.459 + +I'm not sure. But I Think I could cause the err(include/qemu/queue.h). +Description of problem: +At file "include/qemu/queue.h", Maybe I Think QTAILQ_REMOVE could cause a Error. + +``` +#define QTAILQ_REMOVE(head, elm, field) do { \ + if (((elm)->field.tqe_next) != NULL) \ + (elm)->field.tqe_next->field.tqe_circ.tql_prev = \ + (elm)->field.tqe_circ.tql_prev; \ + else \ + (head)->tqh_circ.tql_prev = (elm)->field.tqe_circ.tql_prev; \ + (elm)->field.tqe_circ.tql_prev->tql_next = (elm)->field.tqe_next; \ + (elm)->field.tqe_circ.tql_prev = NULL; \ + (elm)->field.tqe_circ.tql_next = NULL; \ + (elm)->field.tqe_next = NULL; \ +} while (/*CONSTCOND*/0) +``` +If the length of the que is one, line 7 cause a segmentation fault. +Steps to reproduce: +1. Create a Que with QTAILQ_INIT +2. Add one element to que. +3. Remove the element with QTAILQ_REMOVE +Additional information: +queue.h file is located at "inclue/qemu/queue.h" |