DIVINE sim crashes after only six states

[John Lång]

I'm using the static binary version 4.1.20+2018.12.17 of DIVINE. I'm trying to debug my program by running "divine sim", but it seems that it crashes after ony six steps. I've tried with four different programs and it seems to always happen the same way. Here's my latest output:

divine sim examples/ToyApplication/ToyApplication.bc
No entry for terminal type "xterm-256color";
using dumb terminal settings.

^{—————. —.— . . —.— . . .————— . .}

——— | | | | | | |\ | | | |

—(o)— | | | | | | | \ | |———— '————|

——————— | | | \ / | | \| | |

————————— —————' —'— ' —'— ' ' '————— '

Welcome to 'divine sim', an interactive debugger. Type 'help' to get started.
# executing boot at /home/xrockai/src/divine/static/dios/sys/dios.cpp:156

start

# a new program state was stored as #1
# active threads: [0:0]
T: FAULT: invalid pointer passed to vm_obj_free
T: FAULT: invalid pointer passed to vm_obj_free
T: FAULT: invalid pointer passed to vm_obj_free
# a new program state was stored as #2
# active threads: [0:0]
# a new program state was stored as #3
# active threads: [0:0]
# a new program state was stored as #4
# active threads: [0:0]
# a new program state was stored as #5
# active threads: [0:0]
# a new program state was stored as #6
# active threads: [0:0]
T: (0) terminating with uncaught exception of type std::bad_alloc: std::bad_alloc
T: [0] FAULT: Uncaught signal.
T: [0] FATAL: control error in kernel
# executing dios::FaultBase::fault_handler(int, _VM_Frame*, int)
# at /home/xrockai/src/divine/static/dios/sys/fault.cpp:60

backtrace

dios::FaultBase::fault_handler(int, _VM_Frame*, int)

at /home/xrockai/src/divine/static/dios/sys/fault.cpp:60

void dios::FaultBase::handler<{Context} >(_VM_Fault, _VM_Frame*, void (*)())

at /dios/include/dios/sys/fault.hpp:99

dios_fault at /dios/src/libc/sys/fault.c:14
int {Scheduler}::_kill<{ProcMan?}::kill(int, int)::'lambda'({Fault}*)>(int, int, {Fault})

at /dios/include/dios/sys/scheduling.hpp:514

{ProcMan?}::kill(int, int) at /dios/include/dios/sys/procmanager.hpp:270
{BaseContext?}::SysEnter?<{Context} >::kill(int, int)

at /dios/include/sys/argpad.hpp:53

kill at /dios/include/sys/argpad.hpp:53
raise at /dios/src/libc/_PDCLIB/glue.c:125
abort at /home/xrockai/src/divine/static/dios/libc/stdlib/abort.c:14
abort_message

at /home/xrockai/src/divine/static/dios/libcxxabi/src/abort_message.cpp:86

default_terminate_handler() at /dios/src/libcxxabi/src/cxa_default_handlers.cpp:63
std::terminate(void (*)()) at /dios/src/libcxxabi/src/cxa_handlers.cpp:68
std::terminate() at /dios/src/libcxxabi/src/cxa_handlers.cpp:99
clang_call_terminate at (unknown location)
std::2::locale::locale() at /dios/src/libcxx/src/locale.cpp:498
std::2::basic_streambuf<char, std::2::char_traits<char> >::basic_streambuf()

at /dios/include/libcxx/include/streambuf:227

std::2::stdinbuf<char>::stdinbuf(_PDCLIB_file*, _PDCLIB_mbstate*)

at /dios/include/libcxx/include/std_stream:44

std::2::ios_base::Init::Init() at /dios/src/libcxx/src/iostream.cpp:81
_GLOBALsub_I_iostream.cpp at /dios/src/libcxx/src/iostream.cpp:76
(anonymous namespace)::run_ctors_dtors(char const*, bool)

at /dios/src/libc/sys/start.cpp:42

dios_run_ctors at /dios/src/libc/sys/start.cpp:62
_start at /dios/src/libc/sys/start.cpp:76

# executing dios::FaultBase::fault_handler(int, _VM_Frame*, int)
# at /home/xrockai/src/divine/static/dios/sys/fault.cpp:60