1 Release 3.20.0 (24 Oct 2022)
2 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
5 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
6 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
7 X86/Solaris, AMD64/Solaris, AMD64/MacOSX 10.12, X86/FreeBSD and
8 AMD64/FreeBSD. There is also preliminary support for X86/macOS 10.13,
9 AMD64/macOS 10.13 and nanoMIPS/Linux.
11 * ==================== CORE CHANGES ===================
13 * The option "--vgdb-stop-at=event1,event2,..." accepts the new value abexit.
14 This indicates to invoke gdbserver when your program exits abnormally
15 (i.e. with a non zero exit code).
16 * Fix Rust v0 name demangling.
17 * The Linux rseq syscall is now implemented as (silently) returning ENOSYS.
18 * Add FreeBSD syscall wrappers for __specialfd and __realpathat.
19 * Remove FreeBSD dependencies on COMPAT10, which fixes compatibility with
21 * The option --enable-debuginfod=<no|yes> [default: yes] has been added on
23 * More DWARF5 support as generated by clang14.
25 * ==================== FIXED BUGS ====================
27 The following bugs have been fixed or resolved. Note that "n-i-bz"
28 stands for "not in bugzilla" -- that is, a bug that was reported to us
29 but never got a bugzilla entry. We encourage you to file bugs in
30 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
31 than mailing the developers (or mailing lists) directly -- bugs that
32 are not entered into bugzilla tend to get forgotten about or ignored.
34 131186 writev reports error in (vector[...])
35 434764 iconv_open causes ld.so v2.28+ to use optimised strncmp
36 446754 Improve error codes from alloc functions under memcheck
37 452274 memcheck crashes with Assertion 'sci->status.what == SsIdle' failed
38 452779 Valgrind fails to build on FreeBSD 13.0 with llvm-devel (15.0.0)
39 453055 shared_timed_mutex drd test fails with "Lock shared failed" message
40 453602 Missing command line option to enable/disable debuginfod
41 452802 Handle lld 9+ split RW PT_LOAD segments correctly
42 454040 s390x: False-positive memcheck:cond in memmem on arch13 systems
43 456171 [PATCH] FreeBSD: Don't record address errors when accessing the 'kern.ps_strings' sysctl struct
44 n-i-bz Implement vgdb invoker on FreeBSD
45 458845 PowerPC: The L field for the dcbf and sync instruction should be
47 458915 Remove register cache to fix 458915 gdbserver causes wrong syscall return
48 459031 Documentation on --error-exitcode incomplete
49 459477 XERROR messages lacks ending '\n' in vgdb
51 To see details of a given bug, visit
52 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
53 where XXXXXX is the bug number as listed above.
55 (3.20.0.RC1: 20 Oct 2022)
58 Release 3.19.0 (11 Apr 2022)
59 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
61 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
62 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
63 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
64 X86/Solaris, AMD64/Solaris, AMD64/MacOSX 10.12, X86/FreeBSD and
65 AMD64/FreeBSD. There is also preliminary support for X86/macOS 10.13,
66 AMD64/macOS 10.13 and nanoMIPS/Linux.
68 * ==================== CORE CHANGES ===================
70 * Fix Rust v0 name demangling.
71 * The Linux rseq syscall is now implemented as (silently) returning ENOSYS.
72 * Add FreeBSD syscall wrappers for __specialfd and __realpathat.
73 * Remove FreeBSD dependencies on COMPAT10, which fixes compatibility with HardenedBSD
75 * ================== PLATFORM CHANGES =================
78 - ignore the "v8.x" architecture levels, only look at actual CPU features
79 present. Fixes mismatch detected between RDMA and atomics features
80 preventing startup on some QEMU configurations.
81 - Implement LD{,A}XP and ST{,L}XP
82 - Fix incorrect code emitted for doubleword CAS.
85 - Fix sys_ipc semtimedop syscall
86 - Fix VFLRX and WFLRX instructions
87 - Fix EXRL instruction with negative offset
90 - Reimplement the vbpermq instruction support to generate less Iops and
91 avoid overflowing internal buffers.
92 - Fix checking for scv support to avoid "Facility 'SCV' unavailable (12),
93 exception" messages in dmsg.
94 - Fix setting condition code for Vector Compare quad word instructions.
95 - Fix fix lxsibzx, lxsihzx and lxsihzx instructions so they only load
96 their respective sized data.
97 - Fix the prefixed stq instruction in PC relative mode.
99 * ==================== TOOL CHANGES ===================
102 - Speed up --track-origins=yes for large (in the range of hundreds to
103 thousands of megabytes) mmap/munmaps.
105 - Several fixes for new versions of libstd++ using new posix try_lock
108 * ==================== FIXED BUGS ====================
110 The following bugs have been fixed or resolved. Note that "n-i-bz"
111 stands for "not in bugzilla" -- that is, a bug that was reported to us
112 but never got a bugzilla entry. We encourage you to file bugs in
113 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
114 than mailing the developers (or mailing lists) directly -- bugs that
115 are not entered into bugzilla tend to get forgotten about or ignored.
117 403802 leak_cpp_interior fails with some reachable blocks different than expected
118 435732 memcheck/tests/leak_cpp_interior fails with gcc11
119 444242 s390x: Valgrind crashes on EXRL with negative offset
120 444399 arm64: unhandled instruction 0xC87F2D89 (LD{,A}XP and ST{,L}XP).
122 444481 gdb_server test failures on s390x
123 444495 dhat/tests/copy fails on s390x
124 444552 memcheck/tests/sem fails on s390x with glibc 2.34
125 444571 PPC, fix the lxsibzx and lxsihzx so they only load their respective
127 444836 PPC, pstq instruction for R=1 is not storing to the correct address.
128 444925 fexecve syscall wrapper not properly implemented
129 445032 valgrind/memcheck crash with SIGSEGV when SIGVTALRM timer used and
131 445211 Fix out of tree builds
132 445300 [PATCH] Fix building tests with Musl
133 445011 SIGCHLD is sent when valgrind uses debuginfod-find
134 445354 arm64 backend: incorrect code emitted for doubleword CAS
135 445415 arm64 front end: alignment checks missing for atomic instructions
136 445504 Using C++ condition_variable results in bogus "mutex is locked simultaneously by two threads" warning
137 445607 Unhandled amd64-freebsd syscall: 247
138 445668 Inline stack frame generation is broken for Rust binaries
139 445916 Demangle Rust v0 symbols with .llvm suffix
140 446139 DRD/Helgrind with std::shared_timed_mutex::try_lock_until and try_lock_shared_until false positives
141 446138 DRD/Helgrind with std::timed_mutex::try_lock_until false positives
142 446281 Add a DRD suppression for fwrite
143 446103 Memcheck: `--track-origins=yes` causes extreme slowdowns for large mmap/munmap
144 446139 DRD/Helgrind with std::shared_timed_mutex::try_lock_until and try_lock_shared_until false
145 446251 TARGET_SIGNAL_THR added to enum target_signal
146 446823 FreeBSD - missing syscalls when using libzm4
147 447991 s390x: Valgrind indicates illegal instruction on wflrx
148 447995 Valgrind segfault on power10 due to hwcap checking code
149 449483 Powerpc: vcmpgtsq., vcmpgtuq,, vcmpequq. instructions not setting the
150 condition code correctly.
151 449672 ppc64 --track-origins=yes failures because of bad cmov addHRegUse
152 449838 sigsegv liburing the 'impossible' happened for io_uring_setup
153 450025 Powerc: ACC file not implemented as a logical overlay of the VSR
155 450437 Warn for execve syscall with argv or argv[0] being NULL
156 450536 Powerpc: valgrind throws 'facility scv unavailable exception'
157 451626 Syscall param bpf(attr->raw_tracepoint.name) points to unaddressable byte(s)
158 451827 [ppc64le] VEX temporary storage exhausted with several vbpermq instructions
159 451843 valgrind fails to start on a FreeBSD system which enforces W^X
161 To see details of a given bug, visit
162 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
163 where XXXXXX is the bug number as listed above.
165 (3.19.0.RC1: 02 Apr 2022)
166 (3.19.0.RC2: 08 Apr 2022)
169 Release 3.18.0 (15 Oct 2021)
170 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
172 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
173 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
174 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
175 X86/Solaris, AMD64/Solaris, AMD64/MacOSX 10.12, X86/FreeBSD and
176 AMD64/FreeBSD. There is also preliminary support for X86/macOS 10.13,
177 AMD64/macOS 10.13 and nanoMIPS/Linux.
179 * ==================== CORE CHANGES ===================
181 * The libiberty demangler has been updated, which brings support for
182 Rust v0 name demangling. [Update: alas, due to a bug, this support
183 isn't working in 3.18.0.]
185 * __libc_freeres isn't called anymore after the program recieves a
186 fatal signal. Causing some internal glibc resources to hang around,
187 but preventing any crashes after the program has ended.
189 * The DWARF reader is now very much faster at startup when just
190 --read-inline-info=yes (the default in most cases) is given.
192 * glibc 2.34, which moved various functions from libpthread.so into
193 libc.so, is now supported.
195 * ================== PLATFORM CHANGES =================
199 - v8.2 scalar and vector FABD, FACGE, FACGT and FADD.
200 - v8.2 FP compare & conditional compare instructions.
201 - Zero variants of v8.2 FP compare instructions.
205 - Support the miscellaneous-instruction-extensions facility 3 and
206 the vector-enhancements facility 2. This enables programs
207 compiled with "-march=arch13" or "-march=z15" to be executed
212 - ISA 3.1 support is now complete
213 - ISA 3.0 support for the darn instruction added.
214 - ISA 3.0 support for the vector system call instruction scv added.
215 - ISA 3.0 support for the copy, paste and cpabort instructions added.
217 * Support for X86/FreeBSD and AMD64/FreeBSD has been added.
219 * ==================== OTHER CHANGES ====================
221 * Memcheck on amd64: minor fixes to remove some false positive
224 * ==================== FIXED BUGS ====================
226 The following bugs have been fixed or resolved. Note that "n-i-bz"
227 stands for "not in bugzilla" -- that is, a bug that was reported to us
228 but never got a bugzilla entry. We encourage you to file bugs in
229 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
230 than mailing the developers (or mailing lists) directly -- bugs that
231 are not entered into bugzilla tend to get forgotten about or ignored.
233 208531 [PATCH]: FreeBSD support for valgrind
234 368960 WARNING: unhandled amd64-linux syscall: 163 (acct)
235 407589 [Linux] Add support for C11 aligned_alloc() and GNU reallocarray()
236 423963 Error in child thread when CLONE_PIDFD is used
237 426148 crash with "impossible happened" when running BPF CO-RE programs
238 429375 PPC ISA 3.1 support is missing, part 9
239 431157 PPC_FEATURE2_SCV needs to be masked in AT_HWCAP2
240 431306 Update demangler to support Rust v0 name mangling
241 432387 s390x: z15 instructions support
242 433437 FreeBSD support, part 1
243 433438 FreeBSD support, part 2
244 433439 FreeBSD support, part 3
245 433469 FreeBSD support, part 4
246 433473 FreeBSD support, part 5
247 433477 FreeBSD support, part 6
248 433479 FreeBSD support, part 7
249 433504 FreeBSD support, part 8
250 433506 FreeBSD support, part 9
251 433507 FreeBSD support, part 10
252 433508 FreeBSD support, part 11
253 433510 FreeBSD support, part 12
254 433801 PPC ISA 3.1 support is missing, part 10 (ISA 3.1 support complete)
255 433863 s390x: memcheck/tests/s390x/{cds,cs,csg} failures
256 434296 s390x: False-positive memcheck diagnostics from vector string
258 434840 PPC64 darn instruction not supported
259 435665 PPC ISA 3.0 copy, paste, cpabort instructions are not supported
260 435908 valgrind tries to fetch from deubginfod for files which already
261 have debug information
262 438871 unhandled instruction bytes: 0xF3 0x49 0xF 0x6F 0x9C 0x24 0x60 0x2
263 439046 valgrind is unusably large when linked with lld
264 439090 Implement close_range(2)
265 439326 Valgrind 3.17.0 won't compile with Intel 2021 oneAPI compilers
266 439590 glibc-2.34 breaks suppressions against obj:*/lib*/libc-2.*so*
267 440670 unhandled ppc64le-linux syscall: 252 statfs64 and 253 fstatfs64
268 440906 Fix impossible constraint issue in P10 testcase.
269 441512 Remove a unneeded / unnecessary prefix check.
270 441534 Update the expected output for test_isa_3_1_VRT.
271 442061 very slow execution under Fedora 34 (readdwarf3)
272 443031 Gcc -many change requires explicit .machine directives
273 443033 Add support for the ISA 3.0 mcrxrx instruction
274 443034 Sraw, srawi, srad, sradi, mfs
275 443178 Powerpc, test jm-mfspr expected output needs to be updated.
276 443179 Need new test for the lxvx and stxvx instructions on ISA 2.07 and
278 443180 The subnormal test and the ISA 3.0 test generate compiler warnings
279 443314 In the latest GIT version, Valgrind with "--trace-flags" crashes
281 443605 Don't call final_tidyup (__libc_freeres) on FatalSignal
283 To see details of a given bug, visit
284 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
285 where XXXXXX is the bug number as listed below.
287 (3.18.0.RC1: 12 Oct 2021)
288 (3.18.0: 15 Oct 2021)
292 Release 3.17.0 (19 Mar 2021)
293 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
295 3.17.0 fixes a number of bugs and adds some functional changes: support for
296 GCC 11, Clang 11, DWARF5 debuginfo, the 'debuginfod' debuginfo server, and
297 some new instructions for Arm64, S390 and POWER. There are also some tool
300 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
301 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
302 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
303 X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12. There is also preliminary
304 support for X86/macOS 10.13, AMD64/macOS 10.13 and nanoMIPS/Linux.
306 * ==================== CORE CHANGES ===================
308 * DWARF version 5 support. Valgrind can now read DWARF version 5 debuginfo as
311 * Valgrind now supports debuginfod, an HTTP server for distributing ELF/DWARF
312 debugging information. When a debuginfo file cannot be found locally,
313 Valgrind is able to query debuginfod servers for the file using its
314 build-id. See the user manual for more information about debuginfod support.
316 * ================== PLATFORM CHANGES =================
320 - Inaccuracies resulting from double-rounding in the simulation of
321 floating-point multiply-add/subtract instructions have been fixed. These
322 should now behave exactly as the hardware does.
324 - Partial support for the ARM v8.2 instruction set. v8.2 support work is
325 ongoing. Support for the half-word variants of at least the following
326 instructions has been added:
328 FABS <Vd>.<T>, <Vn>.<T>
330 FNEG <Vd>.<T>, <Vn>.<T>
332 FSQRT <Vd>.<T>, <Vn>.<T>
337 - Implement the new instructions/features that were added to z/Architecture
338 with the vector-enhancements facility 1. Also cover the instructions from
339 the vector-packed-decimal facility that are defined outside the chapter
340 "Vector Decimal Instructions", but not the ones from that chapter itself.
342 For a detailed list of newly supported instructions see the updates to
343 `docs/internals/s390-opcodes.csv'.
345 Since the miscellaneous instruction extensions facility 2 was already
346 added in Valgrind 3.16.0, this completes the support necessary to run
347 general programs built with `--march=z14' under Valgrind. The
348 vector-packed-decimal facility is currently not exploited by the standard
349 toolchain and libraries.
353 - Various bug fixes. Fix for the sync field to limit setting just two of
354 the two bits in the L-field. Fix the write size for the stxsibx and
355 stxsihx instructions. Fix the modsw and modsd instructions.
357 - Partial support for ISA 3.1 has been added. Support for the VSX PCV mask
358 instructions, bfloat16 GER instructions, and bfloat16 to/from float 32-bit
359 conversion instructions are still missing.
361 * ==================== TOOL CHANGES ====================
363 * General tool changes
365 - All the tools and their vgpreload libraries are now installed under
366 libexec because they cannot be executed directly and should be run through
367 the valgrind executable. This should be an internal, not user visible,
368 change, but might impact valgrind packagers.
370 - The --track-fds option now respects -q, --quiet and won't output anything
371 if no file descriptors are leaked. It also won't report the standard stdin
372 (0), stdout (1) or stderr (2) descriptors as being leaked with
373 --trace-fds=yes anymore. To track whether the standard file descriptors
374 are still open at the end of the program run use --trace-fds=all.
378 - DHAT has been extended, with two new modes of operation. The new
379 --mode=copy flag triggers copy profiling, which records calls to memcpy,
380 strcpy, and similar functions. The new --mode=ad-hoc flag triggers ad hoc
381 profiling, which records calls to the DHAT_AD_HOC_EVENT client request in
382 the new dhat/dhat.h file. This is useful for learning more about hot code
383 paths. See the user manual for more information about the new modes.
385 - Because of these changes, DHAT's file format has changed. DHAT output
386 files produced with earlier versions of DHAT will not work with this
387 version of DHAT's viewer, and DHAT output files produced with this version
388 of DHAT will not work with earlier versions of DHAT's viewer.
390 * ==================== FIXED BUGS ====================
392 The following bugs have been fixed or resolved. Note that "n-i-bz"
393 stands for "not in bugzilla" -- that is, a bug that was reported to us
394 but never got a bugzilla entry. We encourage you to file bugs in
395 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
396 than mailing the developers (or mailing lists) directly -- bugs that
397 are not entered into bugzilla tend to get forgotten about or ignored.
399 To see details of a given bug, visit
400 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
401 where XXXXXX is the bug number as listed below.
403 140178 open("/proc/self/exe", ...); doesn't quite work
404 140939 --track-fds reports leakage of stdout/in/err and doesn't respect -q
405 217695 malloc/calloc/realloc/memalign failure doesn't set errno to ENOMEM
406 338633 gdbserver_tests/nlcontrolc.vgtest hangs on arm64
407 345077 linux syscall execveat support (linux 3.19)
408 361770 Missing F_ADD_SEALS
409 369029 handle linux syscalls sched_getattr and sched_setattr
410 384729 __libc_freeres inhibits cross-platform valgrind
411 388787 Support for C++17 new/delete
412 391853 Makefile.all.am:L247 and @SOLARIS_UNDEF_LARGESOURCE@ being empty
413 396656 Warnings while reading debug info
414 397605 ioctl FICLONE mishandled
415 401416 Compile failure with openmpi 4.0
416 408663 Suppression file for musl libc
417 404076 s390x: z14 vector instructions not implemented
418 410743 shmat() calls for 32-bit programs fail when running in 64-bit valgrind
419 (actually affected all x86 and nanomips regardless of host bitness)
420 413547 regression test does not check for Arm 64 features.
421 414268 Enable AArch64 feature detection and decoding for v8.x instructions
422 415293 Incorrect call-graph tracking due to new _dl_runtime_resolve_xsave*
423 422174 unhandled instruction bytes: 0x48 0xE9 (REX prefixed JMP instruction)
424 422261 platform selection fails for unqualified client name
425 422623 epoll_ctl warns for uninitialized padding on non-amd64 64bit arches
426 423021 PPC: Add missing ISA 3.0 documentation link and HWCAPS test.
427 423195 PPC ISA 3.1 support is missing, part 1
428 423361 Adds io_uring support on arm64/aarch64 (and all other arches)
429 424012 crash with readv/writev having invalid but not NULL arg2 iovec
430 424298 amd64: Implement RDSEED
431 425232 PPC ISA 3.1 support is missing, part 2
432 425820 Failure to recognize vpcmpeqq as a dependency breaking idiom.
433 426014 arm64: implement fmadd and fmsub as Iop_MAdd/Sub
434 426123 PPC ISA 3.1 support is missing, part 3
435 426144 Fix "condition variable has not been initialized" on Fedora 33.
436 427400 PPC ISA 3.1 support is missing, part 4
437 427401 PPC ISA 3.1 support is missing, part 5
438 427404 PPC ISA 3.1 support is missing, part 6
439 427870 lmw, lswi and related PowerPC insns aren't allowed on ppc64le
440 427787 Support new faccessat2 linux syscall (439)
441 427969 debuginfo section duplicates a section in the main ELF file
442 428035 drd: Unbreak the musl build
443 428648 s390_emit_load_mem panics due to 20-bit offset for vector load
444 428716 cppcheck detects potential leak in VEX/useful/smchash.c
445 428909 helgrind: need to intercept duplicate libc definitions for Fedora 33
446 429352 PPC ISA 3.1 support is missing, part 7
447 429354 PPC ISA 3.1 support is missing, part 8
448 429692 unhandled ppc64le-linux syscall: 147 (getsid)
449 429864 s390x: C++ atomic test_and_set yields false-positive memcheck
451 429952 Errors when building regtest with clang
452 430354 ppc stxsibx and stxsihx instructions write too much data
453 430429 valgrind.h doesn't compile on s390x with clang
454 430485 expr_is_guardable doesn't handle Iex_Qop
455 431556 Complete arm64 FADDP v8.2 instruction support
456 432102 Add support for DWARF5 as produced by GCC11
457 432161 Addition of arm64 v8.2 FADDP, FNEG and FSQRT
458 432381 drd: Process STACK_REGISTER client requests
459 432552 [AArch64] invalid error emitted for pre-decremented byte/hword addresses
460 432672 vg_regtest: test-specific environment variables not reset between tests
461 432809 VEX should support REX.W + POPF
462 432861 PPC modsw and modsd give incorrect results for 1 mod 12
463 432870 gdbserver_tests:nlcontrolc hangs with newest glibc2.33 x86-64
464 432215 Add debuginfod functionality
465 433323 Use pkglibexecdir as vglibdir
466 433500 DRD regtest faulures when libstdc++ and libgcc debuginfo are installed
467 433629 valgrind/README has type "abd" instead of "and"
468 433641 Rust std::sys::unix::fs::try_statx Syscall param fstatat(file_name)
469 433898 arm64: Handle sp, lr, fp as DwReg in CfiExpr
470 434193 GCC 9+ inlined strcmp causes "Conditional jump or move [..] value" report
471 n-i-bz helgrind: If hg_cli__realloc fails, return NULL.
472 n-i-bz arm64 front end: avoid Memcheck false positives relating to CPUID
474 (3.17.0.RC1: 13 Mar 2021)
475 (3.17.0.RC2: 17 Mar 2021)
476 (3.17.0: 19 Mar 2021)
480 Release 3.16.1 (22 June 2020)
481 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
483 3.16.1 fixes two critical bugs discovered after 3.16.0 was frozen. It also
484 fixes character encoding problems in the documentation HTML.
486 422677 PPC sync instruction L field should only be 2 bits in ISA 3.0
487 422715 32-bit x86: vex: the `impossible' happened: expr_is_guardable: unhandled expr
489 (3.16.1, 22 June 2020, 36d6727e1d768333a536f274491e5879cab2c2f7)
493 Release 3.16.0 (27 May 2020)
494 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
496 3.16.0 is a feature release with many improvements and the usual collection of
499 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
500 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
501 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
502 X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12. There is also preliminary
503 support for X86/macOS 10.13, AMD64/macOS 10.13 and nanoMIPS/Linux.
505 * ==================== CORE CHANGES ===================
507 * It is now possible to dynamically change the value of many command line
508 options while your program (or its children) are running under Valgrind.
510 To see the list of dynamically changeable options, run
511 "valgrind --help-dyn-options".
513 You can change the options from the shell by using vgdb to launch
514 the monitor command "v.clo <clo option>...".
515 The same monitor command can be used from a gdb connected
516 to the valgrind gdbserver.
517 Your program can also change the dynamically changeable options using
518 the client request VALGRIND_CLO_CHANGE(option).
520 * ================== PLATFORM CHANGES =================
522 * MIPS: preliminary support for nanoMIPS instruction set has been added.
524 * ==================== TOOL CHANGES ====================
528 - The implicit memcpy done by each call to realloc now counts towards the
529 read and write counts of resized heap blocks, making those counts higher
534 - cg_annotate's --auto and --show-percs options now default to 'yes', because
535 they are usually wanted.
539 - callgrind_annotate's --auto and --show-percs options now default to 'yes',
540 because they are usually wanted.
542 - The command option --collect-systime has been enhanced to specify
543 the unit used to record the elapsed time spent during system calls.
544 The command option now accepts the values no|yes|msec|usec|nsec,
545 where yes is a synonym of msec. When giving the value nsec, the
546 system cpu time of system calls is also recorded.
550 - Several memcheck options are now dynamically changeable.
551 Use valgrind --help-dyn-options to list them.
553 - The release 3.15 introduced a backward incompatible change for
554 some suppression entries related to preadv and pwritev syscalls.
555 When reading a suppression entry using the unsupported 3.14 format,
556 valgrind will now produce a warning to say the suppression entry will not
557 work, and suggest the needed change.
559 - Significantly fewer false positive errors on optimised code generated by
560 Clang and GCC. In particular, Memcheck now deals better with the
561 situation where the compiler will transform C-level "A && B" into "B && A"
562 under certain circumstances (in which the transformation is valid).
563 Handling of integer equality/non-equality checks on partially defined
564 values is also improved on some architectures.
568 - The exprimental Stack and Global Array Checking tool has been removed.
569 It only ever worked on x86 and amd64, and even on those it had a
570 high false positive rate and was slow. An alternative for detecting
571 stack and global array overruns is using the AddressSanitizer (ASAN)
572 facility of the GCC and Clang compilers, which require you to rebuild
573 your code with -fsanitize=address.
575 * ==================== OTHER CHANGES ====================
577 * New and modified GDB server monitor features:
579 - Option -T tells vgdb to output a timestamp in the vgdb information messages.
581 - The gdbserver monitor commands that require an address and an optional
582 length argument now accepts the alternate 'C like' syntax "address[length]".
583 For example, the memcheck command "monitor who_points_at 0x12345678 120"
584 can now also be given as "monitor who_points_at 0x12345678[120]".
586 * ==================== FIXED BUGS ====================
588 The following bugs have been fixed or resolved. Note that "n-i-bz"
589 stands for "not in bugzilla" -- that is, a bug that was reported to us
590 but never got a bugzilla entry. We encourage you to file bugs in
591 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
592 than mailing the developers (or mailing lists) directly -- bugs that
593 are not entered into bugzilla tend to get forgotten about or ignored.
595 To see details of a given bug, visit
596 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
597 where XXXXXX is the bug number as listed below.
599 343099 Linux setns syscall wrapper missing, unhandled syscall: 308
600 == 368923 WARNING: unhandled arm64-linux syscall: 268 (setns)
601 == 369031 WARNING: unhandled amd64-linux syscall: 308 (setns)
602 385386 Assertion failed "szB >= CACHE_ENTRY_SIZE" at m_debuginfo/image.c:517
603 400162 Patch: Guard against __GLIBC_PREREQ for musl libc
604 400593 In Coregrind, use statx for some internal syscalls if [f]stat[64] fail
605 400872 Add nanoMIPS support to Valgrind
606 403212 drd/tests/trylock hangs on FreeBSD
607 404406 s390x: z14 miscellaneous instructions not implemented
608 405201 Incorrect size of struct vki_siginfo on 64-bit Linux architectures
609 406561 mcinfcallWSRU gdbserver_test fails on ppc64
610 406824 Unsupported baseline
611 407218 Add support for the copy_file_range syscall
612 407307 Intercept stpcpy also in ld.so for arm64
613 407376 Update Xen support to 4.12 (4.13, actually) and add more coverage
615 407764 drd cond_post_wait gets wrong (?) condition on s390x z13 system
616 408009 Expose rdrand and f16c even on avx if host cpu supports them
617 408091 Missing pkey syscalls
618 408414 Add support for missing for preadv2 and pwritev2 syscalls
619 409141 Valgrind hangs when SIGKILLed
620 409206 Support for Linux PPS and PTP ioctls
621 409367 exit_group() after signal to thread waiting in futex() causes hangs
622 409429 amd64: recognize 'cmpeq' variants as a dependency breaking idiom
623 409780 References to non-existent configure.in
624 410556 Add support for BLKIO{MIN,OPT} and BLKALIGNOFF ioctls
625 410599 Non-deterministic behaviour of pth_self_kill_15_other test
626 410757 discrepancy for preadv2/pwritev2 syscalls across different versions
627 411134 Allow the user to change a set of command line options during execution
628 411451 amd64->IR of bt/btc/bts/btr with immediate clears zero flag
629 412344 Problem setting mips flags with specific paths
630 412408 unhandled arm-linux syscall: 124 - adjtime - on arm-linux
631 413119 Ioctl wrapper for DRM_IOCTL_I915_GEM_MMAP
632 413330 avx-1 test fails on AMD EPYC 7401P 24-Core Processor
633 413603 callgrind_annotate/cg_annotate truncate function names at '#'
634 414565 Specific use case bug found in SysRes VG_(do_sys_sigprocmask)
635 415136 ARMv8.1 Compare-and-Swap instructions are not supported
636 415757 vex x86->IR: 0x66 0xF 0xCE 0x4F (bswapw)
637 416239 valgrind crashes when handling clock_adjtime
638 416285 Use prlimit64 in VG_(getrlimit) and VG_(setrlimit)
639 416286 DRD reports "conflicting load" error on std::mutex::lock()
640 416301 s390x: "compare and signal" not supported
641 416387 finit_module and bpf syscalls are unhandled on arm64
642 416464 Fix false reports for uninitialized memory for PR_CAPBSET_READ/DROP
643 416667 gcc10 ppc64le impossible constraint in 'asm' in test_isa.
644 416753 new 32bit time syscalls for 2038+
645 417075 pwritev(vector[...]) suppression ignored
646 417075 is not fixed, but incompatible supp entries are detected
647 and a warning is produced for these.
648 417187 [MIPS] Conditional branch problem since 'grail' changes
649 417238 Test memcheck/tests/vbit-test fails on mips64 BE
650 417266 Make memcheck/tests/linux/sigqueue usable with musl
651 417281 s390x: /bin/true segfaults with "grail" enabled
652 417427 commit to fix vki_siginfo_t definition created numerous regression
654 417452 s390_insn_store_emit: dst->tag for HRcVec128
655 417578 Add suppressions for glibc DTV leaks
656 417906 clone with CLONE_VFORK and no CLONE_VM fails
657 418004 Grail code additions break ppc64.
658 418435 s390x: spurious "Conditional jump or move depends on uninitialised [..]"
659 418997 s390x: Support Iex_ITE for float and vector types
660 419503 s390x: Avoid modifying registers returned from isel functions
661 421321 gcc10 arm64 build needs __getauxval for linking with libgcc
662 421570 std_mutex fails on Arm v8.1 h/w
663 434035 vgdb might crash if valgrind is killed
664 n-i-bz Fix minor one time leaks in dhat.
665 n-i-bz Add --run-cxx-freeres=no in outer args to avoid inner crashes.
666 n-i-bz Add support for the Linux io_uring system calls
667 n-i-bz sys_statx: don't complain if both |filename| and |buf| are NULL.
668 n-i-bz Fix non-glibc build of test suite with s390x_features
669 n-i-bz MinGW, include/valgrind.h: Fix detection of 64-bit mode
670 423195 PPC ISA 3.1 support is missing, part 1
672 (3.16.0.RC1: 18 May 2020, git 6052ee66a0cf5234e8e2a2b49a8760226bc13b92)
673 (3.16.0.RC2: 19 May 2020, git 940ec1ca69a09f7fdae3e800b7359f85c13c4b37)
674 (3.16.0: 27 May 2020, git bf5e647edb9e96cbd5c57cc944984402eeee296d)
678 Release 3.15.0 (12 April 2019)
679 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
681 3.15.0 is a feature release with many improvements and the usual collection of
684 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
685 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
686 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
687 X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12. There is also preliminary
688 support for X86/macOS 10.13 and AMD64/macOS 10.13.
690 * ==================== CORE CHANGES ===================
692 * The XTree Massif output format now makes use of the information obtained
693 when specifying --read-inline-info=yes.
695 * amd64 (x86_64): the RDRAND and F16C insn set extensions are now supported.
697 * ==================== TOOL CHANGES ====================
701 - DHAT been thoroughly overhauled, improved, and given a GUI. As a result,
702 it has been promoted from an experimental tool to a regular tool. Run it
703 with --tool=dhat instead of --tool=exp-dhat.
705 - DHAT now prints only minimal data when the program ends, instead writing
706 the bulk of the profiling data to a file. As a result, the --show-top-n
707 and --sort-by options have been removed.
709 - Profile results can be viewed with the new viewer, dh_view.html. When
710 a run ends, a short message is printed, explaining how to view the result.
712 - See the documentation for more details.
716 - cg_annotate has a new option, --show-percs, which prints percentages next
721 - callgrind_annotate has a new option, --show-percs, which prints percentages
722 next to all event counts.
724 - callgrind_annotate now inserts commas in call counts, and
725 sort the caller/callee lists in the call tree.
729 - The default value for --read-inline-info is now "yes" on
730 Linux/Android/Solaris. It is still "no" on other OS.
734 - The option --xtree-leak=yes (to output leak result in xtree format)
735 automatically activates the option --show-leak-kinds=all, as xtree
736 visualisation tools such as kcachegrind can in any case select what kind
737 of leak to visualise.
739 - There has been further work to avoid false positives. In particular,
740 integer equality on partially defined inputs (C == and !=) is now handled
743 * ==================== OTHER CHANGES ====================
745 * The new option --show-error-list=no|yes displays, at the end of the run, the
746 list of detected errors and the used suppressions. Prior to this change,
747 showing this information could only be done by specifying "-v -v", but that
748 also produced a lot of other possibly-non-useful messages. The option -s is
749 equivalent to --show-error-list=yes.
751 * ==================== FIXED BUGS ====================
753 The following bugs have been fixed or resolved. Note that "n-i-bz"
754 stands for "not in bugzilla" -- that is, a bug that was reported to us
755 but never got a bugzilla entry. We encourage you to file bugs in
756 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
757 than mailing the developers (or mailing lists) directly -- bugs that
758 are not entered into bugzilla tend to get forgotten about or ignored.
760 To see details of a given bug, visit
761 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
762 where XXXXXX is the bug number as listed below.
764 385411 s390x: z13 vector floating-point instructions not implemented
765 397187 z13 vector register support for vgdb gdbserver
766 398183 Vex errors with _mm256_shuffle_epi8/vpshufb
767 398870 Please add support for instruction vcvtps2ph
768 399287 amd64 front end: Illegal Instruction vcmptrueps
769 399301 Use inlined frames in Massif XTree output.
770 399322 Improve callgrind_annotate output
771 399444 VEX/priv/guest_s390_toIR.c:17407: (style) Mismatching assignment [..]
772 400164 helgrind test encounters mips x-compiler warnings and assembler error
773 400490 s390x: VRs allocated as if separate from FPRs
774 400491 s390x: Operand of LOCH treated as unsigned integer
775 400975 Compile error: error: '-mips64r2' conflicts with the other architecture
776 options, which specify a mips64 processor
777 401112 LLVM 5.0 generates comparison against partially initialized data
778 401277 More bugs in z13 support
779 401454 Add a --show-percs option to cg_annotate and callgrind_annotate.
780 401578 drd: crashes sometimes on fork()
781 401627 memcheck errors with glibc avx2 optimized wcsncmp
782 401822 none/tests/ppc64/jm-vmx fails and produces assembler warnings
783 401827 none/tests/ppc64/test_isa_2_06_part3 failure on ppc64le (xvrsqrtesp)
784 401828 none/tests/ppc64/test_isa_2_06_part1 failure on ppc64le (fcfids and
786 402006 mark helper regs defined in final_tidyup before freeres_wrapper call
787 402048 WARNING: unhandled ppc64[be|le]-linux syscall: 26 (ptrace)
788 402123 invalid assembler opcodes for mips32r2
789 402134 assertion fail in mc_translate.c (noteTmpUsesIn) Iex_VECRET on arm64
790 402327 Warning: DWARF2 CFI reader: unhandled DW_OP_ opcode 0x13 (DW_OP_drop)
791 402341 drd/tests/tsan_thread_wrappers_pthread.h:369: suspicious code ?
792 402351 mips64 libvexmultiarch_test fails on s390x
794 402395 coregrind/vgdb-invoker-solaris.c: 2 * poor error checking
795 402480 Do not use %rsp in clobber list
796 402481 vbit-test fails on x86 for Iop_CmpEQ64 iselInt64Expr Sar64
797 402515 Implement new option --show-error-list=no|yes / -s
798 402519 POWER 3.0 addex instruction incorrectly implemented
799 402781 Redo the cache used to process indirect branch targets
800 403123 vex amd64->IR:0xF3 0x48 0xF 0xAE 0xD3 (wrfsbase)
801 403552 s390x: wrong facility bit checked for vector facility
802 404054 memcheck powerpc subfe x, x, x initializes x to 0 or -1 based on CA
803 404638 Add VG_(replaceIndexXA)
804 404843 s390x: backtrace sometimes ends prematurely
805 404888 autotools cleanup series
806 405079 unhandled ppc64le-linux syscall: 131 (quotactl)
807 405182 Valgrind fails to build with Clang
808 405205 filter_libc: remove the line holding the futex syscall error entirely
809 405356 PPC64, xvcvsxdsp, xvcvuxdsp are supposed to write the 32-bit result to
810 the upper and lower 32-bits of the 64-bit result
811 405362 PPC64, vmsummbm instruction doesn't handle overflow case correctly
812 405363 PPC64, xvcvdpsxws, xvcvdpuxws, do not handle NaN arguments correctly.
813 405365 PPC64, function _get_maxmin_fp_NaN() doesn't handle QNaN, SNaN case
815 405403 s390x disassembler cannot be used on x86
816 405430 Use gcc -Wimplicit-fallthrough=2 by default if available
817 405458 MIPS mkFormVEC arguments swapped?
818 405716 drd: Fix an integer overflow in the stack margin calculation
819 405722 Support arm64 core dump
820 405733 PPC64, xvcvdpsp should write 32-bit result to upper and lower 32-bits
821 of the 64-bit destination field.
822 405734 PPC64, vrlwnm, vrlwmi, vrldrm, vrldmi do not work properly when me < mb
823 405782 "VEX temporary storage exhausted" when attempting to debug slic3r-pe
824 406198 none/tests/ppc64/test_isa_3_0_other test sporadically including CA
826 406256 PPC64, vector floating point instructions don't handle subnormal
827 according to VSCR[NJ] bit setting.
828 406352 cachegrind/callgrind fails ann tests because of missing a.c
829 406354 dhat is broken on x86 (32bit)
830 406355 mcsignopass, mcsigpass, mcbreak fail due to difference in gdb output
831 406357 gdbserver_tests fails because of gdb output change
832 406360 memcheck/tests/libstdc++.supp needs more supression variants
833 406422 none/tests/amd64-linux/map_32bits.vgtest fails too easily
834 406465 arm64 insn selector fails on "t0 = <expr>" where <expr> has type Ity_F16
835 407340 PPC64, does not support the vlogefp, vexptefp instructions.
836 n-i-bz add syswrap for PTRACE_GET|SET_THREAD_AREA on amd64.
837 n-i-bz Fix callgrind_annotate non deterministic order for equal total
838 n-i-bz callgrind_annotate --threshold=100 does not print all functions.
839 n-i-bz callgrind_annotate Use of uninitialized value in numeric gt (>)
840 n-i-bz amd64 (x86_64): RDRAND and F16C insn set extensions are supported
842 (3.15.0.RC1: 8 April 2019, git ce94d674de5b99df173aad4c3ee48fc2a92e5d9c)
843 (3.15.0.RC2: 11 April 2019, git 0c8be9bbede189ec580ec270521811766429595f)
844 (3.15.0: 14 April 2019, git 270037da8b508954f0f7d703a0bebf5364eec548)
848 Release 3.14.0 (9 October 2018)
849 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
851 3.14.0 is a feature release with many improvements and the usual collection of
854 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
855 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
856 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
857 X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12. There is also preliminary
858 support for X86/macOS 10.13, AMD64/macOS 10.13.
860 * ==================== CORE CHANGES ===================
862 * The new option --keep-debuginfo=no|yes (default no) can be used to retain
863 debug info for unloaded code. This allows saved stack traces (e.g. for
864 memory leaks) to include file/line info for code that has been dlclose'd (or
865 similar). See the user manual for more information and known limitations.
867 * Ability to specify suppressions based on source file name and line number.
869 * Majorly overhauled register allocator. No end-user changes, but the JIT
870 generates code a bit more quickly now.
872 * ================== PLATFORM CHANGES =================
874 * Preliminary support for macOS 10.13 has been added.
876 * mips: support for MIPS32/MIPS64 Revision 6 has been added.
878 * mips: support for MIPS SIMD architecture (MSA) has been added.
880 * mips: support for MIPS N32 ABI has been added.
882 * s390: partial support for vector instructions (integer and string) has been
885 * ==================== TOOL CHANGES ====================
887 * Helgrind: Addition of a flag
888 --delta-stacktrace=no|yes [yes on linux amd64/x86]
889 which specifies how full history stack traces should be computed.
890 Setting this to =yes can speed up Helgrind by 25% when using
891 --history-level=full.
893 * Memcheck: reduced false positive rate for optimised code created by Clang 6
894 / LLVM 6 on x86, amd64 and arm64. In particular, Memcheck analyses code
895 blocks more carefully to determine where it can avoid expensive definedness
896 checks without loss of precision. This is controlled by the flag
897 --expensive-definedness-checks=no|auto|yes [auto].
899 * ==================== OTHER CHANGES ====================
901 * Valgrind is now buildable with link-time optimisation (LTO). A new
902 configure option --enable-lto=yes allows building Valgrind with LTO. If the
903 toolchain supports it, this produces a smaller/faster Valgrind (up to 10%).
904 Note that if you are doing Valgrind development, --enable-lto=yes massively
905 slows down the build process.
907 * ==================== FIXED BUGS ====================
909 The following bugs have been fixed or resolved. Note that "n-i-bz"
910 stands for "not in bugzilla" -- that is, a bug that was reported to us
911 but never got a bugzilla entry. We encourage you to file bugs in
912 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
913 than mailing the developers (or mailing lists) directly -- bugs that
914 are not entered into bugzilla tend to get forgotten about or ignored.
916 To see details of a given bug, visit
917 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
918 where XXXXXX is the bug number as listed below.
920 79362 Debug info is lost for .so files when they are dlclose'd
921 208052 strlcpy error when n = 0
922 255603 exp-sgcheck Assertion '!already_present' failed
923 338252 building valgrind with -flto (link time optimisation) fails
924 345763 MIPS N32 ABI support
925 368913 WARNING: unhandled arm64-linux syscall: 117 (ptrace)
926 == 388664 unhandled arm64-linux syscall: 117 (ptrace)
927 372347 Replacement problem of the additional c++14/c++17 new/delete operators
928 373069 memcheck/tests/leak_cpp_interior fails with GCC 5.1+
929 376257 helgrind history full speed up using a cached stack
930 379373 Fix syscall param msg->desc.port.name points to uninitialised byte(s)
932 379748 Fix missing pselect syscall (OS X 10.11)
933 379754 Fix missing syscall ulock_wait (OS X 10.12)
934 380397 s390x: __GI_strcspn() replacemenet needed
935 381162 possible array overrun in VEX register allocator
936 381272 ppc64 doesn't compile test_isa_2_06_partx.c without VSX support
937 381274 powerpc too chatty even with --sigill-diagnostics=no
938 381289 epoll_pwait can have a NULL sigmask
939 381553 VEX register allocator v3
940 381556 arm64: Handle feature registers access on 4.11 Linux kernel or later
941 381769 Use ucontext_t instead of struct ucontext
942 381805 arm32 needs ld.so index hardwire for new glibc security fixes
943 382256 gz compiler flag test doesn't work for gold
944 382407 vg_perf needs "--terse" command line option
945 382515 "Assertion 'di->have_dinfo' failed." on wine's dlls/mscoree/tests/[..]
946 382563 MIPS MSA ASE support
947 382998 xml-socket doesn't work
948 383275 massif: m_xarray.c:162 (ensureSpaceXA): Assertion '!xa->arr' failed
949 383723 Fix missing kevent_qos syscall (macOS 10.11)
950 == 385604 illegal hardware instruction (OpenCV cv::namedWindow)
951 384096 Mention AddrCheck at Memcheck's command line option [..]
952 384230 vex x86->IR: 0x67 0xE8 0xAB 0x68
953 == 384156 vex x86->IR: 0x67 0xE8 0x6B 0x6A
954 == 386115 vex x86->IR: 0x67 0xE8 0xD3 0x8B any program
955 == 388407 vex x86->IR: 0x67 0xE8 0xAB 0x29
956 == 394903 vex x86->IR: 0x67 0xE8 0x1B 0xDA
957 384337 performance improvements to VEX register allocator v2 and v3
958 384526 reduce number of spill insns generated by VEX register allocator v3
959 384584 Callee saved regs listed first for AMD64, X86, and PPC architectures
960 384631 Sanitise client args as printed with -v
961 384633 Add a simple progress-reporting facility
962 384987 VEX regalloc: allocate caller-save registers for short lived vregs
963 385055 PPC VEX temporary storage exhausted
964 385182 PPC64 is missing support for the DSCR
965 385183 PPC64, Add support for xscmpeqdp, xscmpgtdp, xscmpgedp, xsmincdp
966 385207 PPC64, generate_store_FPRF() generates too many Iops
967 385208 PPC64, xxperm instruction exhausts temporary memory
968 385210 PPC64, vpermr instruction could exhaust temporary memory
969 385279 unhandled syscall: mach:43 (mach_generate_activity_id)
970 == 395136 valgrind: m_syswrap/syswrap-main.c:438 (Bool eq_Syscall[..]
971 == 387045 Valgrind crashing on High Sierra when testing any newly [..]
972 385334 PPC64, fix vpermr, xxperm, xxpermr mask value.
973 385408 s390x: z13 vector "support" instructions not implemented
974 385409 s390x: z13 vector integer instructions not implemented
975 385410 s390x: z13 vector string instructions not implemented
976 385412 s390x: new non-vector z13 instructions not implemented
977 385868 glibc ld.so _dl_runtime_resolve_avx_slow conditional jump warning.
978 385912 none/tests/rlimit_nofile fails on newer glibc/kernel.
979 385939 Optionally exit on the first error
980 386318 valgrind.org/info/tools.html is missing SGCheck
981 386425 running valgrind + wine on armv7l gives illegal opcode
982 386397 PPC64, valgrind truncates powerpc timebase to 32-bits.
983 387410 MIPSr6 support
984 387664 Memcheck: make expensive-definedness-checks be the default
985 387712 s390x cgijnl reports Conditional jump depends on uninitialised value
986 387766 asm shifts cause false positive "Conditional jump or move depends
987 on uninitialised value"
988 387773 .gnu_debugaltlink paths resolve relative to .debug file, not symlink
989 388174 valgrind with Wine quits with "Assertion 'cfsi_fits' failed"
990 388786 Support bpf syscall in amd64 Linux
991 388862 Add replacements for wmemchr and wcsnlen on Linux
992 389065 valgrind meets gcc flag -Wlogical-op
993 389373 exp-sgcheck the 'impossible' happened as Ist_LoadG is not instrumented
994 390471 suppression by specification of source-file line number
995 390723 make xtree dump files world wide readable, similar to log files
996 391164 constraint bug in tests/ppc64/test_isa_2_07_part1.c for mtfprwa
997 391861 Massif Assertion 'n_ips >= 1 && n_ips <= VG_(clo_backtrace_size)'
998 392118 unhandled amd64-linux syscall: 332 (statx)
999 392449 callgrind not clearing the number of calls properly
1000 393017 Add missing support for xsmaxcdp instruction, bug fixes for xsmincdp,
1001 lxssp, stxssp and stxvl instructions.
1002 393023 callgrind_control risks using the wrong vgdb
1003 393062 build-id ELF phdrs read causes "debuginfo reader: ensure_valid failed"
1004 393099 posix_memalign() invalid write if alignment == 0
1005 393146 failing assert "is_DebugInfo_active(di)"
1006 395709 PPC64 is missing support for the xvnegsp instruction
1007 395682 Accept read-only PT_LOAD segments and .rodata by ld -z separate-code
1009 396475 valgrind OS-X build: config.h not found (out-of-tree macOS builds)
1010 395991 arm-linux: wine's unit tests enter a signal delivery loop [..]
1011 396839 s390x: Trap instructions not implemented
1012 396887 arch_prctl should return EINVAL on unknown option
1013 == 397286 crash before launching binary (Unsupported arch_prctl option)
1014 == 397393 valgrind: the 'impossible' happened: (Archlinux)
1015 == 397521 valgrind: the 'impossible' happened: Unsupported [..]
1016 396906 compile tests failure on mips32-linux: broken inline asm in tests on
1018 397012 glibc ld.so uses arch_prctl on i386
1019 397089 amd64: Incorrect decoding of three-register vmovss/vmovsd opcode 11h
1020 397354 utimensat should ignore timespec tv_sec if tv_nsec is UTIME_NOW/OMIT
1021 397424 glibc 2.27 and gdb_server tests
1022 398028 Assertion `cfsi_fits` failing in simple C program
1023 398066 s390x: cgijl dep1, 0 reports false unitialised values warning
1025 n-i-bz Fix missing workq_ops operations (macOS)
1026 n-i-bz fix bug in strspn replacement
1027 n-i-bz Add support for the Linux BLKFLSBUF ioctl
1028 n-i-bz Add support for the Linux BLKREPORTZONE and BLKRESETZONE ioctls
1029 n-i-bz Fix possible stack trashing by semctl syscall wrapping
1030 n-i-bz Add support for the Linux membarrier() system call
1031 n-i-bz x86 front end: recognise and handle UD2 correctly
1032 n-i-bz Signal delivery for x86-linux: ensure that the stack pointer is
1033 correctly aligned before entering the handler.
1035 (3.14.0.RC1: 30 September 2018, git c2aeea2d28acb0639bcc8cc1e4ab115067db1eae)
1036 (3.14.0.RC2: 3 October 2018, git 3e214c4858a6fdd5697e767543a0c19e30505582)
1037 (3.14.0: 9 October 2018, git 353a3587bb0e2757411f9138f5e936728ed6cc4f)
1041 Release 3.13.0 (15 June 2017)
1042 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1044 3.13.0 is a feature release with many improvements and the usual collection of
1047 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
1048 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
1049 MIPS64/Linux, ARM/Android, ARM64/Android, MIPS32/Android, X86/Android,
1050 X86/Solaris, AMD64/Solaris and AMD64/MacOSX 10.12.
1052 * ==================== CORE CHANGES ===================
1054 * The translation cache size has been increased to keep up with the demands of
1055 large applications. The maximum number of sectors has increased from 24 to
1056 48. The default number of sectors has increased from 16 to 32 on all
1057 targets except Android, where the increase is from 6 to 12.
1059 * The amount of memory that Valgrind can use has been increased from 64GB to
1060 128GB. In particular this means your application can allocate up to about
1061 60GB when running on Memcheck.
1063 * Valgrind's default load address has been changed from 0x3800'0000 to
1064 0x5800'0000, so as to make it possible to load larger executables. This
1065 should make it possible to load executables of size at least 1200MB.
1067 * A massive spaceleak caused by reading compressed debuginfo files has been
1068 fixed. Valgrind should now be entirely usable with gcc-7.0 "-gz" created
1071 * The C++ demangler has been updated.
1073 * Support for demangling Rust symbols has been added.
1075 * A new representation of stack traces, the "XTree", has been added. An XTree
1076 is a tree of stacktraces with data associated with the stacktraces. This is
1077 used by various tools (Memcheck, Helgrind, Massif) to report on the heap
1078 consumption of your program. Reporting is controlled by the new options
1079 --xtree-memory=none|allocs|full and --xtree-memory-file=<file>.
1081 A report can also be produced on demand using the gdbserver monitor command
1082 'xtmemory [<filename>]>'. The XTree can be output in 2 formats: 'callgrind
1083 format' and 'massif format. The existing visualisers for these formats (e.g.
1084 callgrind_annotate, KCachegrind, ms_print) can be used to visualise and
1085 analyse these reports.
1087 Memcheck can also produce XTree leak reports using the Callgrind file
1088 format. For more details, see the user manual.
1090 * ================== PLATFORM CHANGES =================
1092 * ppc64: support for ISA 3.0B and various fixes for existing 3.0 support
1094 * amd64: fixes for JIT failure problems on long AVX2 code blocks
1096 * amd64 and x86: support for CET prefixes has been added
1098 * arm32: a few missing ARMv8 instructions have been implemented
1100 * arm64, mips64, mips32: an alternative implementation of Load-Linked and
1101 Store-Conditional instructions has been added. This is to deal with
1102 processor implementations that implement the LL/SC specifications strictly
1103 and as a result cause Valgrind to hang in certain situations. The
1104 alternative implementation is automatically enabled at startup, as required.
1105 You can use the option --sim-hints=fallback-llsc to force-enable it if you
1108 * Support for OSX 10.12 has been improved.
1110 * On Linux, clone handling has been improved to honour CLONE_VFORK that
1111 involves a child stack. Note however that CLONE_VFORK | CLONE_VM is handled
1112 like CLONE_VFORK (by removing CLONE_VM), so applications that depend on
1113 CLONE_VM exact semantics will (still) not work.
1115 * The TileGX/Linux port has been removed because it appears to be both unused
1118 * ==================== TOOL CHANGES ====================
1122 - Memcheck should give fewer false positives when running optimised
1123 Clang/LLVM generated code.
1125 - Support for --xtree-memory and 'xtmemory [<filename>]>'.
1127 - New command line options --xtree-leak=no|yes and --xtree-leak-file=<file>
1128 to produce the end of execution leak report in a xtree callgrind format
1131 - New option 'xtleak' in the memcheck leak_check monitor command, to produce
1132 the leak report in an xtree file.
1136 - Support for --xtree-memory and 'xtmemory [<filename>]>'.
1138 - For some workloads (typically, for big applications), Massif memory
1139 consumption and CPU consumption has decreased significantly.
1143 - Support for --xtree-memory and 'xtmemory [<filename>]>'.
1145 - addition of client request VALGRIND_HG_GNAT_DEPENDENT_MASTER_JOIN, useful
1146 for Ada gnat compiled applications.
1148 * ==================== OTHER CHANGES ====================
1150 * For Valgrind developers: in an outer/inner setup, the outer Valgrind will
1151 append the inner guest stacktrace to the inner host stacktrace. This helps
1152 to investigate the errors reported by the outer, when they are caused by the
1153 inner guest program (such as an inner regtest). See README_DEVELOPERS for
1156 * To allow fast detection of callgrind files by desktop environments and file
1157 managers, the format was extended to have an optional first line that
1158 uniquely identifies the format ("# callgrind format"). Callgrind creates
1159 this line now, as does the new xtree functionality.
1161 * File name template arguments (such as --log-file, --xtree-memory-file, ...)
1162 have a new %n format letter that is replaced by a sequence number.
1164 * "--version -v" now shows the SVN revision numbers from which Valgrind was
1167 * ==================== FIXED BUGS ====================
1169 The following bugs have been fixed or resolved. Note that "n-i-bz"
1170 stands for "not in bugzilla" -- that is, a bug that was reported to us
1171 but never got a bugzilla entry. We encourage you to file bugs in
1172 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
1173 than mailing the developers (or mailing lists) directly -- bugs that
1174 are not entered into bugzilla tend to get forgotten about or ignored.
1176 To see details of a given bug, visit
1177 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
1178 where XXXXXX is the bug number as listed below.
1180 162848 --log-file output isn't split when a program forks
1181 340777 Illegal instruction on mips (ar71xx)
1182 341481 MIPS64: Iop_CmpNE32 triggers false warning on MIPS64 platforms
1183 342040 Valgrind mishandles clone with CLONE_VFORK | CLONE_VM that clones
1184 to a different stack.
1185 344139 x86 stack-seg overrides, needed by the Wine people
1186 344524 store conditional of guest applications always fail - observed on
1188 348616 Wine/valgrind: noted but unhandled ioctl 0x5390 [..] (DVD_READ_STRUCT)
1189 352395 Please provide SVN revision info in --version -v
1190 352767 Wine/valgrind: noted but unhandled ioctl 0x5307 [..] (CDROMSTOP)
1191 356374 Assertion 'DRD_(g_threadinfo)[tid].pt_threadid !=
1192 INVALID_POSIX_THREADID' failed
1193 358213 helgrind/drd bar_bad testcase hangs or crashes with new glibc pthread
1194 barrier implementation
1195 358697 valgrind.h: Some code remains even when defining NVALGRIND
1196 359202 Add musl libc configure/compile
1197 360415 amd64 instructions ADCX and ADOX are not implemented in VEX
1198 == 372828 (vex amd64->IR: 0x66 0xF 0x3A 0x62 0x4A 0x10)
1199 360429 unhandled ioctl 0x530d with no size/direction hints (CDROMREADMODE1)
1200 362223 assertion failed when .valgrindrc is a directory instead of a file
1201 367543 bt/btc/btr/bts x86/x86_64 instructions are poorly-handled wrt flags
1202 367942 Segfault vgPlain_do_sys_sigaction (m_signals.c:1138)
1203 368507 can't malloc chunks larger than about 34GB
1204 368529 Android arm target link error, missing atexit and pthread_atfork
1205 368863 WARNING: unhandled arm64-linux syscall: 100 (get_robust_list)
1206 368865 WARNING: unhandled arm64-linux syscall: 272 (kcmp)
1207 368868 disInstr(arm64): unhandled instruction 0xD53BE000 = cntfrq_el0 (ARMv8)
1208 368917 WARNING: unhandled arm64-linux syscall: 218 (request_key)
1209 368918 WARNING: unhandled arm64-linux syscall: 127 (sched_rr_get_interval)
1210 368922 WARNING: unhandled arm64-linux syscall: 161 (sethostname)
1211 368924 WARNING: unhandled arm64-linux syscall: 84 (sync_file_range)
1212 368925 WARNING: unhandled arm64-linux syscall: 130 (tkill)
1213 368926 WARNING: unhandled arm64-linux syscall: 97 (unshare)
1214 369459 valgrind on arm64 violates the ARMv8 spec (ldxr/stxr)
1215 370028 Reduce the number of compiler warnings on MIPS platforms
1216 370635 arm64 missing syscall getcpu
1217 371225 Fix order of timer_{gettime,getoverrun,settime} syscalls on arm64
1218 371227 Clean AArch64 syscall table
1219 371412 Rename wrap_sys_shmat to sys_shmat like other wrappers
1220 371471 Valgrind complains about non legit memory leaks on placement new (C++)
1221 371491 handleAddrOverrides() is [incorrect] when ASO prefix is used
1222 371503 disInstr(arm64): unhandled instruction 0xF89F0000
1223 371869 support '%' in symbol Z-encoding
1224 371916 execution tree xtree concept
1225 372120 c++ demangler demangles symbols which are not c++
1226 372185 Support of valgrind on ARMv8 with 32 bit executable
1227 372188 vex amd64->IR: 0x66 0xF 0x3A 0x62 0x4A 0x10 0x10 0x48 (PCMPxSTRx $0x10)
1228 372195 Power PC, xxsel instruction is not always recognized.
1229 372504 Hanging on exit_group
1230 372600 process loops forever when fatal signals are arriving quickly
1231 372794 LibVEX (arm32 front end): 'Assertion szBlg2 <= 3' failed
1232 373046 Stacks registered by core are never deregistered
1233 373069 memcheck/tests/leak_cpp_interior fails with GCC 5.1+
1234 373086 Implement additional Xen hypercalls
1235 373192 Calling posix_spawn in glibc 2.24 completely broken
1236 373488 Support for fanotify API on ARM64 architecture
1237 == 368864 WARNING: unhandled arm64-linux syscall: 262 (fanotify_init)
1238 373555 Rename BBPTR to GSPTR as it denotes guest state pointer only
1239 373938 const IRExpr arguments for matchIRExpr()
1240 374719 some spelling fixes
1241 374963 increase valgrind's load address to prevent mmap failure
1242 375514 valgrind_get_tls_addr() does not work in case of static TLS
1243 375772 +1 error in get_elf_symbol_info() when computing value of 'hi' address
1244 for ML_(find_rx_mapping)()
1245 375806 Test helgrind/tests/tc22_exit_w_lock fails with glibc 2.24
1246 375839 Temporary storage exhausted, with long sequence of vfmadd231ps insns
1247 == 377159 "vex: the `impossible' happened" still present
1248 == 375150 Assertion 'tres.status == VexTransOK' failed
1249 == 378068 valgrind crashes on AVX2 function in FFmpeg
1250 376142 Segfaults on MIPS Cavium Octeon boards
1251 376279 disInstr(arm64): unhandled instruction 0xD50320FF
1252 376455 Solaris: unhandled syscall lgrpsys(180)
1253 376518 Solaris: unhandled fast trap getlgrp(6)
1254 376611 ppc64 and arm64 don't know about prlimit64 syscall
1255 376729 PPC64, remove R2 from the clobber list
1257 376956 syswrap of SNDDRV and DRM_IOCTL_VERSION causing some addresses
1258 to be wrongly marked as addressable
1259 377066 Some Valgrind unit tests fail to compile on Ubuntu 16.10 with
1260 PIE enabled by default
1261 377376 memcheck/tests/linux/getregset fails with glibc2.24
1262 377427 PPC64, lxv instruction failing on odd destination register
1263 377478 PPC64: ISA 3.0 setup fixes
1264 377698 Missing memory check for futex() uaddr arg for FUTEX_WAKE
1265 and FUTEX_WAKE_BITSET, check only 4 args for FUTEX_WAKE_BITSET,
1266 and 2 args for FUTEX_TRYLOCK_PI
1267 377717 Fix massive space leak when reading compressed debuginfo sections
1268 377891 Update Xen 4.6 domctl wrappers
1269 377930 fcntl syscall wrapper is missing flock structure check
1270 378524 libvexmultiarch_test regression on s390x and ppc64
1271 378535 Valgrind reports INTERNAL ERROR in execve syscall wrapper
1272 378673 Update libiberty demangler
1273 378931 Add ISA 3.0B additional isnstructions, add OV32, CA32 setting support
1274 379039 syscall wrapper for prctl(PR_SET_NAME) must not check more than 16 bytes
1275 379094 Valgrind reports INTERNAL ERROR in rt_sigsuspend syscall wrapper
1276 379371 UNKNOWN task message [id 3444, to mach_task_self(), reply 0x603]
1277 (task_register_dyld_image_infos)
1278 379372 UNKNOWN task message [id 3447, to mach_task_self(), reply 0x603]
1279 (task_register_dyld_shared_cache_image_info)
1280 379390 unhandled syscall: mach:70 (host_create_mach_voucher_trap)
1281 379473 MIPS: add support for rdhwr cycle counter register
1282 379504 remove TileGX/Linux port
1283 379525 Support more x86 nop opcodes
1284 379838 disAMode(x86): not an addr!
1285 379703 PC ISA 3.0 fixes: stxvx, stxv, xscmpexpdp instructions
1286 379890 arm: unhandled instruction: 0xEBAD 0x1B05 (sub.w fp, sp, r5, lsl #4)
1287 379895 clock_gettime does not execute POST syscall wrapper
1288 379925 PPC64, mtffs does not set the FPCC and C bits in the FPSCR correctly
1289 379966 WARNING: unhandled amd64-linux syscall: 313 (finit_module)
1290 380200 xtree generated callgrind files refer to files without directory name
1291 380202 Assertion failure for cache line size (cls == 64) on aarch64.
1292 380397 s390x: __GI_strcspn() replacement needed
1293 n-i-bz Fix pub_tool_basics.h build issue with g++ 4.4.7.
1295 (3.13.0.RC1: 2 June 2017, vex r3386, valgrind r16434)
1296 (3.13.0.RC2: 9 June 2017, vex r3389, valgrind r16443)
1297 (3.13.0: 14 June 2017, vex r3396, valgrind r16446)
1301 Release 3.12.0 (20 October 2016)
1302 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1304 3.12.0 is a feature release with many improvements and the usual
1305 collection of bug fixes.
1307 This release supports X86/Linux, AMD64/Linux, ARM32/Linux,
1308 ARM64/Linux, PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux,
1309 MIPS32/Linux, MIPS64/Linux, ARM/Android, ARM64/Android,
1310 MIPS32/Android, X86/Android, X86/Solaris, AMD64/Solaris, X86/MacOSX
1311 10.10 and AMD64/MacOSX 10.10. There is also preliminary support for
1312 X86/MacOSX 10.11/12, AMD64/MacOSX 10.11/12 and TILEGX/Linux.
1314 * ================== PLATFORM CHANGES =================
1316 * POWER: Support for ISA 3.0 has been added
1318 * mips: support for O32 FPXX ABI has been added.
1319 * mips: improved recognition of different processors
1320 * mips: determination of page size now done at run time
1322 * amd64: Partial support for AMD FMA4 instructions.
1324 * arm, arm64: Support for v8 crypto and CRC instructions.
1326 * Improvements and robustification of the Solaris port.
1328 * Preliminary support for MacOS 10.12 (Sierra) has been added.
1330 Whilst 3.12.0 continues to support the 32-bit x86 instruction set, we
1331 would prefer users to migrate to 64-bit x86 (a.k.a amd64 or x86_64)
1332 where possible. Valgrind's support for 32-bit x86 has stagnated in
1333 recent years and has fallen far behind that for 64-bit x86
1334 instructions. By contrast 64-bit x86 is well supported, up to and
1337 * ==================== TOOL CHANGES ====================
1341 - Added meta mempool support for describing a custom allocator which:
1342 - Auto-frees all chunks assuming that destroying a pool destroys all
1344 - Uses itself to allocate other memory blocks
1346 - New flag --ignore-range-below-sp to ignore memory accesses below
1347 the stack pointer, if you really have to. The related flag
1348 --workaround-gcc296-bugs=yes is now deprecated. Use
1349 --ignore-range-below-sp=1024-1 as a replacement.
1353 - Improved thread startup time significantly on non-Linux platforms.
1357 - Added collection of the metric "tot-blocks-allocd"
1359 * ==================== OTHER CHANGES ====================
1361 * Replacement/wrapping of malloc/new related functions is now done not just
1362 for system libraries by default, but for any globally defined malloc/new
1363 related function (both in shared libraries and statically linked alternative
1364 malloc implementations). The dynamic (runtime) linker is excluded, though.
1365 To only intercept malloc/new related functions in
1366 system libraries use --soname-synonyms=somalloc=nouserintercepts (where
1367 "nouserintercepts" can be any non-existing library name).
1368 This new functionality is not implemented for MacOS X.
1370 * The maximum number of callers in a suppression entry is now equal to
1371 the maximum size for --num-callers (500).
1372 Note that --gen-suppressions=yes|all similarly generates suppressions
1373 containing up to --num-callers frames.
1375 * New and modified GDB server monitor features:
1377 - Valgrind's gdbserver now accepts the command 'catch syscall'.
1378 Note that you must have GDB >= 7.11 to use 'catch syscall' with
1381 * New option --run-cxx-freeres=<yes|no> can be used to change whether
1382 __gnu_cxx::__freeres() cleanup function is called or not. Default is
1385 * Valgrind is able to read compressed debuginfo sections in two formats:
1386 - zlib ELF gABI format with SHF_COMPRESSED flag (gcc option -gz=zlib)
1387 - zlib GNU format with .zdebug sections (gcc option -gz=zlib-gnu)
1389 * Modest JIT-cost improvements: the cost of instrumenting code blocks
1390 for the most common use case (x86_64-linux, Memcheck) has been
1393 * Improved performance for programs that do a lot of discarding of
1394 instruction address ranges of 8KB or less.
1396 * The C++ symbol demangler has been updated.
1398 * More robustness against invalid syscall parameters on Linux.
1400 * ==================== FIXED BUGS ====================
1402 The following bugs have been fixed or resolved. Note that "n-i-bz"
1403 stands for "not in bugzilla" -- that is, a bug that was reported to us
1404 but never got a bugzilla entry. We encourage you to file bugs in
1405 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
1406 than mailing the developers (or mailing lists) directly -- bugs that
1407 are not entered into bugzilla tend to get forgotten about or ignored.
1409 To see details of a given bug, visit
1410 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
1411 where XXXXXX is the bug number as listed below.
1413 191069 Exiting due to signal not reported in XML output
1414 199468 Suppressions: stack size limited to 25
1415 while --num-callers allows more frames
1416 212352 vex amd64 unhandled opc_aux = 0x 2, first_opcode == 0xDC (FCOM)
1417 278744 cvtps2pd with redundant RexW
1418 303877 valgrind doesn't support compressed debuginfo sections.
1419 345307 Warning about "still reachable" memory when using libstdc++ from gcc 5
1420 348345 Assertion fails for negative lineno
1421 348924 MIPS: Load doubles through memory so the code compiles with the FPXX ABI
1422 351282 V 3.10.1 MIPS softfloat build broken with GCC 4.9.3 / binutils 2.25.1
1423 351692 Dumps created by valgrind are not readable by gdb (mips32 specific)
1424 351804 Crash on generating suppressions for "printf" call on OS X 10.10
1425 352197 mips: mmap2() not wrapped correctly for page size > 4096
1426 353083 arm64 doesn't implement various xattr system calls
1427 353084 arm64 doesn't support sigpending system call
1428 353137 www: update info for Supported Platforms
1429 353138 www: update "The Valgrind Developers" page
1430 353370 don't advertise RDRAND in cpuid for Core-i7-4910-like avx2 machine
1433 353384 amd64->IR: 0x66 0xF 0x3A 0x62 0xD1 0x62 (pcmpXstrX $0x62)
1434 353398 WARNING: unhandled amd64-solaris syscall: 207
1435 353660 XML in auxwhat tag not escaping reserved symbols properly
1436 353680 s390x: Crash with certain glibc versions due to non-implemented TBEGIN
1437 353727 amd64->IR: 0x66 0xF 0x3A 0x62 0xD1 0x72 (pcmpXstrX $0x72)
1438 353802 ELF debug info reader confused with multiple .rodata sections
1439 353891 Assert 'bad_scanned_addr < VG_ROUNDDN(start+len, sizeof(Addr))' failed
1440 353917 unhandled amd64-solaris syscall fchdir(120)
1441 353920 unhandled amd64-solaris syscall: 170
1442 354274 arm: unhandled instruction: 0xEBAD 0x0AC1 (sub.w sl, sp, r1, lsl #3)
1443 354392 unhandled amd64-solaris syscall: 171
1444 354797 Vbit test does not include Iops for Power 8 instruction support
1445 354883 tst->os_state.pthread - magic_delta assertion failure on OSX 10.11
1449 354933 Fix documentation of --kernel-variant=android-no-hw-tls option
1450 355188 valgrind should intercept all malloc related global functions
1451 355454 do not intercept malloc related symbols from the runtime linker
1452 355455 stderr.exp of test cases wrapmalloc and wrapmallocstatic overconstrained
1453 356044 Dwarf line info reader misinterprets is_stmt register
1454 356112 mips: replace addi with addiu
1455 356393 valgrind (vex) crashes because isZeroU happened
1458 356676 arm64-linux: unhandled syscalls 125, 126 (sched_get_priority_max/min)
1459 356678 arm64-linux: unhandled syscall 232 (mincore)
1460 356817 valgrind.h triggers compiler errors on MSVC when defining NVALGRIND
1461 356823 Unsupported ARM instruction: stlex
1462 357059 x86/amd64: SSE cvtpi2ps with memory source does transition to MMX state
1463 357338 Unhandled instruction for SHA instructions libcrypto Boring SSL
1464 357673 crash if I try to run valgrind with a binary link with libcurl
1465 357833 Setting RLIMIT_DATA to zero breaks with linux 4.5+
1466 357871 pthread_spin_destroy not properly wrapped
1467 357887 Calls to VG_(fclose) do not close the file descriptor
1468 357932 amd64->IR: accept redundant REX prefixes for {minsd,maxsd} m128, xmm.
1469 358030 support direct socket calls on x86 32bit (new in linux 4.3)
1470 358478 drd/tests/std_thread.cpp doesn't build with GCC6
1471 359133 Assertion 'eltSzB <= ddpa->poolSzB' failed
1472 359181 Buffer Overflow during Demangling
1473 359201 futex syscall "skips" argument 5 if op is FUTEX_WAIT_BITSET
1474 359289 s390x: popcnt (B9E1) not implemented
1475 359472 The Power PC vsubuqm instruction doesn't always give the correct result
1476 359503 Add missing syscalls for aarch64 (arm64)
1477 359645 "You need libc6-dbg" help message could be more helpful
1478 359703 s390: wire up separate socketcalls system calls
1479 359724 getsockname might crash - deref_UInt should call safe_to_deref
1480 359733 amd64 implement ld.so strchr/index override like x86
1481 359767 Valgrind does not support the IBM POWER ISA 3.0 instructions, part 1/5
1482 359829 Power PC test suite none/tests/ppc64/test_isa_2_07.c uses
1484 359838 arm64: Unhandled instruction 0xD5033F5F (clrex)
1485 359871 Incorrect mask handling in ppoll
1486 359952 Unrecognised PCMPESTRM variants (0x70, 0x19)
1487 360008 Contents of Power vr registers contents is not printed correctly when
1488 the --vgdb-shadow-registers=yes option is used
1489 360035 POWER PC instruction bcdadd and bcdsubtract generate result with
1490 non-zero shadow bits
1491 360378 arm64: Unhandled instruction 0x5E280844 (sha1h s4, s2)
1492 360425 arm64 unsupported instruction ldpsw
1494 360519 none/tests/arm64/memory.vgtest might fail with newer gcc
1495 360571 Error about the Android Runtime reading below the stack pointer on ARM
1496 360574 Wrong parameter type for an ashmem ioctl() call on Android and ARM64
1497 360749 kludge for multiple .rodata sections on Solaris no longer needed
1498 360752 raise the number of reserved fds in m_main.c from 10 to 12
1499 361207 Valgrind does not support the IBM POWER ISA 3.0 instructions, part 2/5
1500 361226 s390x: risbgn (EC59) not implemented
1501 361253 [s390x] ex_clone.c:42: undefined reference to `pthread_create'
1502 361354 ppc64[le]: wire up separate socketcalls system calls
1503 361615 Inconsistent termination for multithreaded process terminated by signal
1504 361926 Unhandled Solaris syscall: sysfs(84)
1505 362009 V dumps core on unimplemented functionality before threads are created
1506 362329 Valgrind does not support the IBM POWER ISA 3.0 instructions, part 3/5
1507 362894 missing (broken) support for wbit field on mtfsfi instruction (ppc64)
1508 362935 [AsusWRT] Assertion 'sizeof(TTEntryC) <= 88' failed
1509 362953 Request for an update to the Valgrind Developers page
1510 363680 add renameat2() support
1511 363705 arm64 missing syscall name_to_handle_at and open_by_handle_at
1512 363714 ppc64 missing syscalls sync, waitid and name_to/open_by_handle_at
1513 363858 Valgrind does not support the IBM POWER ISA 3.0 instructions, part 4/5
1514 364058 clarify in manual limitations of array overruns detections
1515 364413 pselect sycallwrapper mishandles NULL sigmask
1516 364728 Power PC, missing support for several HW registers in
1517 get_otrack_shadow_offset_wrk()
1518 364948 Valgrind does not support the IBM POWER ISA 3.0 instructions, part 5/5
1519 365273 Invalid write to stack location reported after signal handler runs
1520 365912 ppc64BE segfault during jm-insns test (RELRO)
1521 366079 FPXX Support for MIPS32 Valgrind
1522 366138 Fix configure errors out when using Xcode 8 (clang 8.0.0)
1523 366344 Multiple unhandled instruction for Aarch64
1524 (0x0EE0E020, 0x1AC15800, 0x4E284801, 0x5E040023, 0x5E056060)
1525 367995 Integration of memcheck with custom memory allocator
1526 368120 x86_linux asm _start functions do not keep 16-byte aligned stack pointer
1527 368412 False positive result for altivec capability check
1528 368416 Add tc06_two_races_xml.exp output for ppc64
1529 368419 Perf Events ioctls not implemented
1530 368461 mmapunmap test fails on ppc64
1531 368823 run_a_thread_NORETURN assembly code typo for VGP_arm64_linux target
1532 369000 AMD64 fma4 instructions unsupported.
1533 369169 ppc64 fails jm_int_isa_2_07 test
1534 369175 jm_vec_isa_2_07 test crashes on ppc64
1535 369209 valgrind loops and eats up all memory if cwd doesn't exist.
1536 369356 pre_mem_read_sockaddr syscall wrapper can crash with bad sockaddr
1537 369359 msghdr_foreachfield can crash when handling bad iovec
1538 369360 Bad sigprocmask old or new sets can crash valgrind
1539 369361 vmsplice syscall wrapper crashes on bad iovec
1540 369362 Bad sigaction arguments crash valgrind
1541 369383 x86 sys_modify_ldt wrapper crashes on bad ptr
1542 369402 Bad set/get_thread_area pointer crashes valgrind
1543 369441 bad lvec argument crashes process_vm_readv/writev syscall wrappers
1544 369446 valgrind crashes on unknown fcntl command
1545 369439 S390x: Unhandled insns RISBLG/RISBHG and LDE/LDER
1546 369468 Remove quadratic metapool algorithm using VG_(HT_remove_at_Iter)
1547 370265 ISA 3.0 HW cap stuff needs updating
1548 371128 BCD add and subtract instructions on Power BE in 32-bit mode do not work
1549 372195 Power PC, xxsel instruction is not always recognized
1551 n-i-bz Fix incorrect (or infinite loop) unwind on RHEL7 x86 and amd64
1552 n-i-bz massif --pages-as-heap=yes does not report peak caused by mmap+munmap
1553 n-i-bz false positive leaks due to aspacemgr merging heap & non heap segments
1554 n-i-bz Fix ppoll_alarm exclusion on OS X
1555 n-i-bz Document brk segment limitation, reference manual in limit reached msg.
1556 n-i-bz Fix clobber list in none/tests/amd64/xacq_xrel.c [valgrind r15737]
1557 n-i-bz Bump allowed shift value for "add.w reg, sp, reg, lsl #N" [vex r3206]
1558 n-i-bz amd64: memcheck false positive with shr %edx
1559 n-i-bz arm3: Allow early writeback of SP base register in "strd rD, [sp, #-16]"
1560 n-i-bz ppc: Fix two cases of PPCAvFpOp vs PPCFpOp enum confusion
1561 n-i-bz arm: Fix incorrect register-number constraint check for LDAEX{,B,H,D}
1562 n-i-bz DHAT: added collection of the metric "tot-blocks-allocd"
1564 (3.12.0.RC1: 20 October 2016, vex r3282, valgrind r16094)
1565 (3.12.0.RC2: 20 October 2016, vex r3282, valgrind r16096)
1566 (3.12.0: 21 October 2016, vex r3282, valgrind r16098)
1570 Release 3.11.0 (22 September 2015)
1571 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1573 3.11.0 is a feature release with many improvements and the usual
1574 collection of bug fixes.
1576 This release supports X86/Linux, AMD64/Linux, ARM32/Linux,
1577 ARM64/Linux, PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux,
1578 MIPS32/Linux, MIPS64/Linux, ARM/Android, ARM64/Android,
1579 MIPS32/Android, X86/Android, X86/Solaris, AMD64/Solaris, X86/MacOSX
1580 10.10 and AMD64/MacOSX 10.10. There is also preliminary support for
1581 X86/MacOSX 10.11, AMD64/MacOSX 10.11 and TILEGX/Linux.
1583 * ================== PLATFORM CHANGES =================
1585 * Support for Solaris/x86 and Solaris/amd64 has been added.
1587 * Preliminary support for Mac OS X 10.11 (El Capitan) has been added.
1589 * Preliminary support for the Tilera TileGX architecture has been added.
1591 * s390x: It is now required for the host to have the "long displacement"
1592 facility. The oldest supported machine model is z990.
1594 * x86: on an SSE2 only host, Valgrind in 32 bit mode now claims to be a
1595 Pentium 4. 3.10.1 wrongly claimed to be a Core 2, which is SSSE3.
1597 * The JIT's register allocator is significantly faster, making the JIT
1598 as a whole somewhat faster, so JIT-intensive activities, for example
1599 program startup, are modestly faster, around 5%.
1601 * There have been changes to the default settings of several command
1602 line flags, as detailed below.
1604 * Intel AVX2 support is more complete (64 bit targets only). On AVX2
1605 capable hosts, the simulated CPUID will now indicate AVX2 support.
1607 * ==================== TOOL CHANGES ====================
1611 - The default value for --leak-check-heuristics has been changed from
1612 "none" to "all". This helps to reduce the number of possibly
1613 lost blocks, in particular for C++ applications.
1615 - The default value for --keep-stacktraces has been changed from
1616 "malloc-then-free" to "malloc-and-free". This has a small cost in
1617 memory (one word per malloc-ed block) but allows Memcheck to show the
1618 3 stacktraces of a dangling reference: where the block was allocated,
1619 where it was freed, and where it is acccessed after being freed.
1621 - The default value for --partial-loads-ok has been changed from "no" to
1622 "yes", so as to avoid false positive errors resulting from some kinds
1623 of vectorised loops.
1625 - A new monitor command 'xb <addr> <len>' shows the validity bits of
1626 <len> bytes at <addr>. The monitor command 'xb' is easier to use
1627 than get_vbits when you need to associate byte data value with
1628 their corresponding validity bits.
1630 - The 'block_list' monitor command has been enhanced:
1631 o it can print a range of loss records
1632 o it now accepts an optional argument 'limited <max_blocks>'
1633 to control the number of blocks printed.
1634 o if a block has been found using a heuristic, then
1635 'block_list' now shows the heuristic after the block size.
1636 o the loss records/blocks to print can be limited to the blocks
1637 found via specified heuristics.
1639 - The C helper functions used to instrument loads on
1640 x86-{linux,solaris} and arm-linux (both 32-bit only) have been
1641 replaced by handwritten assembly sequences. This gives speedups
1642 in the region of 0% to 7% for those targets only.
1644 - A new command line option, --expensive-definedness-checks=yes|no,
1645 has been added. This is useful for avoiding occasional invalid
1646 uninitialised-value errors in optimised code. Watch out for
1647 runtime degradation, as this can be up to 25%. As always, though,
1648 the slowdown is highly application specific. The default setting
1653 - A new monitor command 'all_snapshots <filename>' dumps all
1654 snapshots taken so far.
1658 - Significant memory reduction and moderate speedups for
1659 --history-level=full for applications accessing a lot of memory
1660 with many different stacktraces.
1662 - The default value for --conflict-cache-size=N has been doubled to
1663 2000000. Users that were not using the default value should
1664 preferably also double the value they give.
1666 The default was changed due to the changes in the "full history"
1667 implementation. Doubling the value gives on average a slightly more
1668 complete history and uses similar memory (or significantly less memory
1669 in the worst case) than the previous implementation.
1671 - The Helgrind monitor command 'info locks' now accepts an optional
1672 argument 'lock_addr', which shows information about the lock at the
1675 - When using --history-level=full, the new Helgrind monitor command
1676 'accesshistory <addr> [<len>]' will show the recorded accesses for
1677 <len> (or 1) bytes at <addr>.
1679 * ==================== OTHER CHANGES ====================
1681 * The default value for the --smc-check option has been changed from
1682 "stack" to "all-non-file" on targets that provide automatic D-I
1683 cache coherence (x86, amd64 and s390x). The result is to provide,
1684 by default, transparent support for JIT generated and self-modifying
1685 code on all targets.
1687 * Mac OS X only: the default value for the --dsymutil option has been
1688 changed from "no" to "yes", since any serious usage on Mac OS X
1689 always required it to be "yes".
1691 * The command line options --db-attach and --db-command have been removed.
1692 They were deprecated in 3.10.0.
1694 * When a process dies due to a signal, Valgrind now shows the signal
1695 and the stacktrace at default verbosity (i.e. verbosity 1).
1697 * The address description logic used by Memcheck and Helgrind now
1698 describes addresses in anonymous segments, file mmap-ed segments,
1699 shared memory segments and the brk data segment.
1701 * The new option --error-markers=<begin>,<end> can be used to mark the
1702 begin/end of errors in textual output mode, to facilitate
1703 searching/extracting errors in output files that mix valgrind errors
1704 with program output.
1706 * The new option --max-threads=<number> can be used to change the number
1707 of threads valgrind can handle. The default is 500 threads which
1708 should be more than enough for most applications.
1710 * The new option --valgrind-stacksize=<number> can be used to change the
1711 size of the private thread stacks used by Valgrind. This is useful
1712 for reducing memory use or increasing the stack size if Valgrind
1713 segfaults due to stack overflow.
1715 * The new option --avg-transtab-entry-size=<number> can be used to specify
1716 the expected instrumented block size, either to reduce memory use or
1717 to avoid excessive retranslation.
1719 * Valgrind can be built with Intel's ICC compiler, version 14.0 or later.
1721 * New and modified GDB server monitor features:
1723 - When a signal is reported in GDB, you can now use the GDB convenience
1724 variable $_siginfo to examine detailed signal information.
1726 - Valgrind's gdbserver now allows the user to change the signal
1727 to deliver to the process. So, use 'signal SIGNAL' to continue execution
1728 with SIGNAL instead of the signal reported to GDB. Use 'signal 0' to
1729 continue without passing the signal to the process.
1731 - With GDB >= 7.10, the command 'target remote'
1732 will automatically load the executable file of the process running
1733 under Valgrind. This means you do not need to specify the executable
1734 file yourself, GDB will discover it itself. See GDB documentation about
1735 'qXfer:exec-file:read' packet for more info.
1737 * ==================== FIXED BUGS ====================
1739 The following bugs have been fixed or resolved. Note that "n-i-bz"
1740 stands for "not in bugzilla" -- that is, a bug that was reported to us
1741 but never got a bugzilla entry. We encourage you to file bugs in
1742 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
1743 than mailing the developers (or mailing lists) directly -- bugs that
1744 are not entered into bugzilla tend to get forgotten about or ignored.
1746 To see details of a given bug, visit
1747 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
1748 where XXXXXX is the bug number as listed below.
1750 116002 VG_(printf): Problems with justification of strings and integers
1751 155125 avoid cutting away file:lineno after long function name
1752 197259 Unsupported arch_prtctl PR_SET_GS option
1753 201152 ppc64: Assertion in ppc32g_dirtyhelper_MFSPR_268_269
1754 201216 Fix Valgrind does not support pthread_sigmask() on OS X
1755 201435 Fix Darwin: -v does not show kernel version
1756 208217 "Warning: noted but unhandled ioctl 0x2000747b" on Mac OS X
1757 211256 Fixed an outdated comment regarding the default platform.
1758 211529 Incomplete call stacks for code compiled by newer versions of MSVC
1759 211926 Avoid compilation warnings in valgrind.h with -pedantic
1760 212291 Fix unhandled syscall: unix:132 (mkfifo) on OS X
1762 226609 Crediting upstream authors in man page
1763 231257 Valgrind omits path when executing script from shebang line
1764 254164 OS X task_info: UNKNOWN task message [id 3405, to mach_task_self() [..]
1765 294065 Improve the pdb file reader by avoiding hardwired absolute pathnames
1766 269360 s390x: Fix addressing mode selection for compare-and-swap
1767 302630 Memcheck: Assertion failed: 'sizeof(UWord) == sizeof(UInt)'
1769 312989 ioctl handling needs to do POST handling on generic ioctls and [..]
1770 319274 Fix unhandled syscall: unix:410 (sigsuspend_nocancel) on OS X
1771 324181 mmap does not handle MAP_32BIT (handle it now, rather than fail it)
1772 327745 Fix valgrind 3.9.0 build fails on Mac OS X 10.6.8
1773 330147 libmpiwrap PMPI_Get_count returns undefined value
1774 333051 mmap of huge pages fails due to incorrect alignment
1776 334802 valgrind does not always explain why a given option is bad
1777 335618 mov.w rN, pc/sp (ARM32)
1778 335785 amd64->IR 0xC4 0xE2 0x75 0x2F (vmaskmovpd)
1783 335907 segfault when running wine's ddrawex/tests/surface.c under valgrind
1784 338602 AVX2 bit in CPUID missing
1785 338606 Strange message for scripts with invalid interpreter
1786 338731 ppc: Fix testuite build for toolchains not supporting -maltivec
1787 338995 shmat with hugepages (SHM_HUGETLB) fails with EINVAL
1788 339045 Getting valgrind to compile and run on OS X Yosemite (10.10)
1790 339156 gdbsrv not called for fatal signal
1791 339215 Valgrind 3.10.0 contain 2013 in copyrights notice
1792 339288 support Cavium Octeon MIPS specific BBIT*32 instructions
1793 339636 Use fxsave64 and fxrstor64 mnemonics instead of old-school rex64 prefix
1794 339442 Fix testsuite build failure on OS X 10.9
1795 339542 Enable compilation with Intel's ICC compiler
1796 339563 The DVB demux DMX_STOP ioctl doesn't have a wrapper
1797 339688 Mac-specific ASM does not support .version directive (cpuid,
1798 tronical and pushfpopf tests)
1799 339745 Valgrind crash when check Marmalade app (partial fix)
1800 339755 Fix known deliberate memory leak in setenv() on Mac OS X 10.9
1801 339778 Linux/TileGx platform support for Valgrind
1802 339780 Fix known uninitialised read in pthread_rwlock_init() on Mac OS X 10.9
1803 339789 Fix none/tests/execve test on Mac OS X 10.9
1804 339808 Fix none/tests/rlimit64_nofile test on Mac OS X 10.9
1805 339820 vex amd64->IR: 0x66 0xF 0x3A 0x63 0xA 0x42 0x74 0x9 (pcmpistri $0x42)
1806 340115 Fix none/tests/cmdline[1|2] tests on systems which define TMPDIR
1807 340392 Allow user to select more accurate definedness checking in memcheck
1808 to avoid invalid complaints on optimised code
1809 340430 Fix some grammatical weirdness in the manual.
1810 341238 Recognize GCC5/DWARFv5 DW_LANG constants (Go, C11, C++11, C++14)
1811 341419 Signal handler ucontext_t not filled out correctly on OS X
1812 341539 VG_(describe_addr) should not describe address as belonging to client
1813 segment if it is past the heap end
1814 341613 Enable building of manythreads and thread-exits tests on Mac OS X
1815 341615 Fix none/tests/darwin/access_extended test on Mac OS X
1816 341698 Valgrind's AESKEYGENASSIST gives wrong result in words 0 and 2 [..]
1817 341789 aarch64: shmat fails with valgrind on ARMv8
1818 341997 MIPS64: Cavium OCTEON insns - immediate operand handled incorrectly
1819 342008 valgrind.h needs type cast [..] for clang/llvm in 64-bit mode
1820 342038 Unhandled syscalls on aarch64 (mbind/get/set_mempolicy)
1821 342063 wrong format specifier for test mcblocklistsearch in gdbserver_tests
1822 342117 Hang when loading PDB file for MSVC compiled Firefox under Wine
1823 342221 socket connect false positive uninit memory for unknown af family
1824 342353 Allow dumping full massif output while valgrind is still running
1825 342571 Valgrind chokes on AVX compare intrinsic with _CMP_GE_QS
1829 342603 Add I2C_SMBUS ioctl support
1830 342635 OS X 10.10 (Yosemite) - missing system calls and fcntl code
1831 342683 Mark memory past the initial brk limit as unaddressable
1832 342783 arm: unhandled instruction 0xEEFE1ACA = "vcvt.s32.f32 s3, s3, #12"
1833 342795 Internal glibc __GI_mempcpy call should be intercepted
1834 342841 s390x: Support instructions fiebr(a) and fidbr(a)
1835 343012 Unhandled syscall 319 (memfd_create)
1836 343069 Patch updating v4l2 API support
1837 343173 helgrind crash during stack unwind
1838 343219 fix GET_STARTREGS for arm
1839 343303 Fix known deliberate memory leak in setenv() on Mac OS X 10.10
1840 343306 OS X 10.10: UNKNOWN mach_msg unhandled MACH_SEND_TRAILER option
1841 343332 Unhandled instruction 0x9E310021 (fcvtmu) on aarch64
1842 343335 unhandled instruction 0x1E638400 (fccmp) aarch64
1843 343523 OS X mach_ports_register: UNKNOWN task message [id 3403, to [..]
1844 343525 OS X host_get_special_port: UNKNOWN host message [id 412, to [..]
1845 343597 ppc64le: incorrect use of offseof macro
1846 343649 OS X host_create_mach_voucher: UNKNOWN host message [id 222, to [..]
1847 343663 OS X 10.10 Memchecj always reports a leak regardless of [..]
1848 343732 Unhandled syscall 144 (setgid) on aarch64
1849 343733 Unhandled syscall 187 (msgctl and related) on aarch64
1850 343802 s390x: False positive "conditional jump or move depends on [..]
1851 343902 --vgdb=yes doesn't break when --xml=yes is used
1852 343967 Don't warn about setuid/setgid/setcap executable for directories
1853 343978 Recognize DWARF5/GCC5 DW_LANG_Fortran 2003 and 2008 constants
1854 344007 accept4 syscall unhandled on arm64 (242) and ppc64 (344)
1855 344033 Helgrind on ARM32 loses track of mutex state in pthread_cond_wait
1856 344054 www - update info for Solaris/illumos
1857 344416 'make regtest' does not work cleanly on OS X
1858 344235 Remove duplicate include of pub_core_aspacemgr.h
1859 344279 syscall sendmmsg on arm64 (269) and ppc32/64 (349) unhandled
1860 344295 syscall recvmmsg on arm64 (243) and ppc32/64 (343) unhandled
1861 344307 2 unhandled syscalls on aarch64/arm64: umount2(39), mount (40)
1862 344314 callgrind_annotate ... warnings about commands containing newlines
1863 344318 socketcall should wrap recvmmsg and sendmmsg
1864 344337 Fix unhandled syscall: mach:41 (_kernelrpc_mach_port_guard_trap)
1865 344416 Fix 'make regtest' does not work cleanly on OS X
1866 344499 Fix compilation for Linux kernel >= 4.0.0
1867 344512 OS X: unhandled syscall: unix:348 (__pthread_chdir),
1868 unix:349 (__pthread_fchdir)
1869 344559 Garbage collection of unused segment names in address space manager
1870 344560 Fix stack traces missing penultimate frame on OS X
1871 344621 Fix memcheck/tests/err_disable4 test on OS X
1872 344686 Fix suppression for pthread_rwlock_init on OS X 10.10
1873 344702 Fix missing libobjc suppressions on OS X 10.10
1875 344936 Fix unhandled syscall: unix:473 (readlinkat) on OS X 10.10
1876 344939 Fix memcheck/tests/xml1 on OS X 10.10
1877 345016 helgrind/tests/locked_vs_unlocked2 is failing sometimes
1878 345079 Fix build problems in VEX/useful/test_main.c
1879 345126 Incorrect handling of VIDIOC_G_AUDIO and G_AUDOUT
1880 345177 arm64: prfm (reg) not implemented
1881 345215 Performance improvements for the register allocator
1882 345248 add support for Solaris OS in valgrind
1883 345338 TIOCGSERIAL and TIOCSSERIAL ioctl support on Linux
1884 345394 Fix memcheck/tests/strchr on OS X
1885 345637 Fix memcheck/tests/sendmsg on OS X
1886 345695 Add POWERPC support for AT_DCACHESIZE and HWCAP2
1887 345824 Fix aspacem segment mismatch: seen with none/tests/bigcode
1888 345887 Fix an assertion in the address space manager
1889 345928 amd64: callstack only contains current function for small stacks
1890 345984 disInstr(arm): unhandled instruction: 0xEE193F1E
1891 345987 MIPS64: Implement cavium LHX instruction
1892 346031 MIPS: Implement support for the CvmCount register (rhwr %0, 31)
1893 346185 Fix typo saving altivec register v24
1894 346267 Compiler warnings for PPC64 code on call to LibVEX_GuestPPC64_get_XER()
1895 and LibVEX_GuestPPC64_get_CR()
1896 346270 Regression tests none/tests/jm_vec/isa_2_07 and
1897 none/tests/test_isa_2_07_part2 have failures on PPC64 little endian
1898 346307 fuse filesystem syscall deadlocks
1899 346324 PPC64 missing support for lbarx, lharx, stbcx and sthcx instructions
1900 346411 MIPS: SysRes::_valEx handling is incorrect
1901 346416 Add support for LL_IOC_PATH2FID and LL_IOC_GETPARENT Lustre ioctls
1902 346474 PPC64 Power 8, spr TEXASRU register not supported
1903 346487 Compiler generates "note" about a future ABI change for PPC64
1904 346562 MIPS64: lwl/lwr instructions are performing 64bit loads
1905 and causing spurious "invalid read of size 8" warnings
1906 346801 Fix link error on OS X: _vgModuleLocal_sf_maybe_extend_stack
1907 347151 Fix suppression for pthread_rwlock_init on OS X 10.8
1908 347233 Fix memcheck/tests/strchr on OS X 10.10 (Haswell)
1909 347322 Power PC regression test cleanup
1910 347379 valgrind --leak-check=full leak errors from system libs on OS X 10.8
1912 347389 unhandled syscall: 373 (Linux ARM syncfs)
1913 347686 Patch set to cleanup PPC64 regtests
1914 347978 Remove bash dependencies where not needed
1915 347982 OS X: undefined symbols for architecture x86_64: "_global" [..]
1916 347988 Memcheck: the 'impossible' happened: unexpected size for Addr (OSX/wine)
1918 348102 Patch updating v4l2 API support
1919 348247 amd64 front end: jno jumps wrongly when overflow is not set
1920 348269 Improve mmap MAP_HUGETLB support.
1921 348334 (ppc) valgrind does not simulate dcbfl - then my program terminates
1922 348345 Assertion fails for negative lineno
1923 348377 Unsupported ARM instruction: yield
1924 348565 Fix detection of command line option availability for clang
1925 348574 vex amd64->IR pcmpistri SSE4.2 unsupported (pcmpistri $0x18)
1926 348728 Fix broken check for VIDIOC_G_ENC_INDEX
1927 348748 Fix redundant condition
1928 348890 Fix clang warning about unsupported --param inline-unit-growth=900
1929 348949 Bogus "ERROR: --ignore-ranges: suspiciously large range"
1930 349034 Add Lustre ioctls LL_IOC_GROUP_LOCK and LL_IOC_GROUP_UNLOCK
1931 349086 Fix UNKNOWN task message [id 3406, to mach_task_self(), [..]
1932 349087 Fix UNKNOWN task message [id 3410, to mach_task_self(), [..]
1933 349626 Implemented additional Xen hypercalls
1934 349769 Clang/osx: ld: warning: -read_only_relocs cannot be used with x86_64
1935 349790 Clean up of the hardware capability checking utilities.
1936 349828 memcpy intercepts memmove causing src/dst overlap error (ppc64 ld.so)
1937 349874 Fix typos in source code
1938 349879 memcheck: add handwritten assembly for helperc_LOADV*
1939 349941 di_notify_mmap might create wrong start/size DebugInfoMapping
1940 350062 vex x86->IR: 0x66 0xF 0x3A 0xB (ROUNDSD) on OS X
1941 350202 Add limited param to 'monitor block_list'
1942 350290 s390x: Support instructions fixbr(a)
1943 350359 memcheck/tests/x86/fxsave hangs indefinetely on OS X
1944 350809 Fix none/tests/async-sigs for Solaris
1945 350811 Remove reference to --db-attach which has been removed.
1946 350813 Memcheck/x86: enable handwritten assembly helpers for x86/Solaris too
1947 350854 hard-to-understand code in VG_(load_ELF)()
1948 351140 arm64 syscalls setuid (146) and setresgid (149) not implemented
1949 351386 Solaris: Cannot run ld.so.1 under Valgrind
1950 351474 Fix VG_(iseqsigset) as obvious
1951 351531 Typo in /include/vki/vki-xen-physdev.h header guard
1952 351756 Intercept platform_memchr$VARIANT$Haswell on OS X
1953 351858 ldsoexec support on Solaris
1954 351873 Newer gcc doesn't allow __builtin_tabortdc[i] in ppc32 mode
1955 352130 helgrind reports false races for printfs using mempcpy on FILE* state
1956 352284 s390: Conditional jump depends on uninitialised value(s) in vfprintf
1957 352320 arm64 crash on none/tests/nestedfs
1958 352765 Vbit test fails on Power 6
1959 352768 The mbar instruction is missing from the Power PC support
1960 352769 Power PC program priority register (PPR) is not supported
1961 n-i-bz Provide implementations of certain compiler builtins to support
1962 compilers that may not provide those
1963 n-i-bz Old STABS code is still being compiled, but never used. Remove it.
1964 n-i-bz Fix compilation on distros with glibc < 2.5
1965 n-i-bz (vex 3098) Avoid generation of Neon insns on non-Neon hosts
1966 n-i-bz Enable rt_sigpending syscall on ppc64 linux.
1967 n-i-bz mremap did not work properly on shared memory
1968 n-i-bz Fix incorrect sizeof expression in syswrap-xen.c reported by Coverity
1969 n-i-bz In VALGRIND_PRINTF write out thread name, if any, to xml
1971 (3.11.0.TEST1: 8 September 2015, vex r3187, valgrind r15646)
1972 (3.11.0.TEST2: 21 September 2015, vex r3193, valgrind r15667)
1973 (3.11.0: 22 September 2015, vex r3195, valgrind r15674)
1977 Release 3.10.1 (25 November 2014)
1978 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1979 3.10.1 is a bug fix release. It fixes various bugs reported in 3.10.0
1980 and backports fixes for all reported missing AArch64 ARMv8 instructions
1981 and syscalls from the trunk. If you package or deliver 3.10.0 for others
1982 to use, you might want to consider upgrading to 3.10.1 instead.
1984 The following bugs have been fixed or resolved. Note that "n-i-bz"
1985 stands for "not in bugzilla" -- that is, a bug that was reported to us
1986 but never got a bugzilla entry. We encourage you to file bugs in
1987 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
1988 than mailing the developers (or mailing lists) directly -- bugs that
1989 are not entered into bugzilla tend to get forgotten about or ignored.
1991 To see details of a given bug, visit
1992 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
1993 where XXXXXX is the bug number as listed below.
1995 335440 arm64: ld1 (single structure) is not implemented
1996 335713 arm64: unhanded instruction: prfm (immediate)
1997 339020 ppc64: memcheck/tests/ppc64/power_ISA2_05 failing in nightly build
1998 339182 ppc64: AvSplat ought to load destination vector register with [..]
1999 339336 PPC64 store quad instruction (stq) is not supposed to change [..]
2000 339433 ppc64 lxvw4x instruction uses four 32-byte loads
2001 339645 Use correct tag names in sys_getdents/64 wrappers
2002 339706 Fix false positive for ioctl(TIOCSIG) on linux
2003 339721 assertion 'check_sibling == sibling' failed in readdwarf3.c ...
2004 339853 arm64 times syscall unknown
2005 339855 arm64 unhandled getsid/setsid syscalls
2006 339858 arm64 dmb sy not implemented
2007 339926 Unhandled instruction 0x1E674001 (frintx) on aarm64
2008 339927 Unhandled instruction 0x9E7100C6 (fcvtmu) on aarch64
2009 339938 disInstr(arm64): unhandled instruction 0x4F8010A4 (fmla)
2011 339940 arm64: unhandled syscall: 83 (sys_fdatasync) + patch
2012 340033 arm64: unhandled insn dmb ishld and some other isb-dmb-dsb variants
2013 340028 unhandled syscalls for arm64 (msync, pread64, setreuid and setregid)
2014 340036 arm64: Unhandled instruction ld4 (multiple structures, no offset)
2015 340236 arm64: unhandled syscalls: mknodat, fchdir, chroot, fchownat
2016 340509 arm64: unhandled instruction fcvtas
2017 340630 arm64: fchmod (52) and fchown (55) syscalls not recognized
2018 340632 arm64: unhandled instruction fcvtas
2019 340722 Resolve "UNKNOWN attrlist flags 0:0x10000000"
2020 340725 AVX2: Incorrect decoding of vpbroadcast{b,w} reg,reg forms
2021 340788 warning: unhandled syscall: 318 (getrandom)
2022 340807 disInstr(arm): unhandled instruction: 0xEE989B20
2023 340856 disInstr(arm64): unhandled instruction 0x1E634C45 (fcsel)
2024 340922 arm64: unhandled getgroups/setgroups syscalls
2025 350251 Fix typo in VEX utility program (test_main.c).
2026 350407 arm64: unhandled instruction ucvtf (vector, integer)
2027 350809 none/tests/async-sigs breaks when run under cron on Solaris
2028 350811 update README.solaris after r15445
2029 350813 Use handwritten memcheck assembly helpers on x86/Solaris [..]
2030 350854 strange code in VG_(load_ELF)()
2031 351140 arm64 syscalls setuid (146) and setresgid (149) not implemented
2032 n-i-bz DRD and Helgrind: Handle Imbe_CancelReservation (clrex on ARM)
2033 n-i-bz Add missing ]] to terminate CDATA.
2034 n-i-bz Glibc versions prior to 2.5 do not define PTRACE_GETSIGINFO
2035 n-i-bz Enable sys_fadvise64_64 on arm32.
2036 n-i-bz Add test cases for all remaining AArch64 SIMD, FP and memory insns.
2037 n-i-bz Add test cases for all known arm64 load/store instructions.
2038 n-i-bz PRE(sys_openat): when checking whether ARG1 == VKI_AT_FDCWD [..]
2039 n-i-bz Add detection of old ppc32 magic instructions from bug 278808.
2040 n-i-bz exp-dhat: Implement missing function "dh_malloc_usable_size".
2041 n-i-bz arm64: Implement "fcvtpu w, s".
2042 n-i-bz arm64: implement ADDP and various others
2043 n-i-bz arm64: Implement {S,U}CVTF (scalar, fixedpt).
2044 n-i-bz arm64: enable FCVT{A,N}S X,S.
2046 (3.10.1: 25 November 2014, vex r3026, valgrind r14785)
2050 Release 3.10.0 (10 September 2014)
2051 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2053 3.10.0 is a feature release with many improvements and the usual
2054 collection of bug fixes.
2056 This release supports X86/Linux, AMD64/Linux, ARM32/Linux, ARM64/Linux,
2057 PPC32/Linux, PPC64BE/Linux, PPC64LE/Linux, S390X/Linux, MIPS32/Linux,
2058 MIPS64/Linux, ARM/Android, MIPS32/Android, X86/Android, X86/MacOSX 10.9
2059 and AMD64/MacOSX 10.9. Support for MacOSX 10.8 and 10.9 is
2060 significantly improved relative to the 3.9.0 release.
2062 * ================== PLATFORM CHANGES =================
2064 * Support for the 64-bit ARM Architecture (AArch64 ARMv8). This port
2065 is mostly complete, and is usable, but some SIMD instructions are as
2068 * Support for little-endian variant of the 64-bit POWER architecture.
2070 * Support for Android on MIPS32.
2072 * Support for 64bit FPU on MIPS32 platforms.
2074 * Both 32- and 64-bit executables are supported on MacOSX 10.8 and 10.9.
2076 * Configuration for and running on Android targets has changed.
2077 See README.android in the source tree for details.
2079 * ================== DEPRECATED FEATURES =================
2081 * --db-attach is now deprecated and will be removed in the next
2082 valgrind feature release. The built-in GDB server capabilities are
2083 superior and should be used instead. Learn more here:
2084 http://valgrind.org/docs/manual/manual-core-adv.html#manual-core-adv.gdbserver
2086 * ==================== TOOL CHANGES ====================
2090 - Client code can now selectively disable and re-enable reporting of
2091 invalid address errors in specific ranges using the new client
2092 requests VALGRIND_DISABLE_ADDR_ERROR_REPORTING_IN_RANGE and
2093 VALGRIND_ENABLE_ADDR_ERROR_REPORTING_IN_RANGE.
2095 - Leak checker: there is a new leak check heuristic called
2096 "length64". This is used to detect interior pointers pointing 8
2097 bytes inside a block, on the assumption that the first 8 bytes
2098 holds the value "block size - 8". This is used by
2099 sqlite3MemMalloc, for example.
2101 - Checking of system call parameters: if a syscall parameter
2102 (e.g. bind struct sockaddr, sendmsg struct msghdr, ...) has
2103 several fields not initialised, an error is now reported for each
2104 field. Previously, an error was reported only for the first
2105 uninitialised field.
2107 - Mismatched alloc/free checking: a new flag
2108 --show-mismatched-frees=no|yes [yes] makes it possible to turn off
2109 such checks if necessary.
2113 - Improvements to error messages:
2115 o Race condition error message involving heap allocated blocks also
2116 show the thread number that allocated the raced-on block.
2118 o All locks referenced by an error message are now announced.
2119 Previously, some error messages only showed the lock addresses.
2121 o The message indicating where a lock was first observed now also
2122 describes the address/location of the lock.
2124 - Helgrind now understands the Ada task termination rules and
2125 creates a happens-before relationship between a terminated task
2126 and its master. This avoids some false positives and avoids a big
2127 memory leak when a lot of Ada tasks are created and terminated.
2128 The interceptions are only activated with forthcoming releases of
2129 gnatpro >= 7.3.0w-20140611 and gcc >= 5.0.
2131 - A new GDB server monitor command "info locks" giving the list of
2132 locks, their location, and their status.
2136 - callgrind_control now supports the --vgdb-prefix argument,
2137 which is needed if valgrind was started with this same argument.
2139 * ==================== OTHER CHANGES ====================
2141 * Unwinding through inlined function calls. Stack unwinding can now
2142 make use of Dwarf3 inlined-unwind information if it is available.
2143 The practical effect is that inlined calls become visible in stack
2144 traces. The suppression matching machinery has been adjusted
2145 accordingly. This is controlled by the new option
2146 --read-inline-info=yes|no. Currently this is enabled by default
2147 only on Linux and Android targets and only for the tools Memcheck,
2150 * Valgrind can now read EXIDX unwind information on 32-bit ARM
2151 targets. If an object contains both CFI and EXIDX unwind
2152 information, Valgrind will prefer the CFI over the EXIDX. This
2153 facilitates unwinding through system libraries on arm-android
2156 * Address description logic has been improved and is now common
2157 between Memcheck and Helgrind, resulting in better address
2158 descriptions for some kinds of error messages.
2160 * Error messages about dubious arguments (eg, to malloc or calloc) are
2161 output like other errors. This means that they can be suppressed
2162 and they have a stack trace.
2164 * The C++ demangler has been updated for better C++11 support.
2166 * New and modified GDB server monitor features:
2168 - Thread local variables/storage (__thread) can now be displayed.
2170 - The GDB server monitor command "v.info location <address>"
2171 displays information about an address. The information produced
2172 depends on the tool and on the options given to valgrind.
2173 Possibly, the following are described: global variables, local
2174 (stack) variables, allocated or freed blocks, ...
2176 - The option "--vgdb-stop-at=event1,event2,..." allows the user to
2177 ask the GDB server to stop at the start of program execution, at
2178 the end of the program execution and on Valgrind internal errors.
2180 - A new monitor command "v.info stats" shows various Valgrind core
2181 and tool statistics.
2183 - A new monitor command "v.set hostvisibility" allows the GDB server
2184 to provide access to Valgrind internal host status/memory.
2186 * A new option "--aspace-minaddr=<address>" can in some situations
2187 allow the use of more memory by decreasing the address above which
2188 Valgrind maps memory. It can also be used to solve address
2189 conflicts with system libraries by increasing the default value.
2190 See user manual for details.
2192 * The amount of memory used by Valgrind to store debug info (unwind
2193 info, line number information and symbol data) has been
2194 significantly reduced, even though Valgrind now reads more
2195 information in order to support unwinding of inlined function calls.
2197 * Dwarf3 handling with --read-var-info=yes has been improved:
2199 - Ada and C struct containing VLAs no longer cause a "bad DIE" error
2201 - Code compiled with
2202 -ffunction-sections -fdata-sections -Wl,--gc-sections
2203 no longer causes assertion failures.
2205 * Improved checking for the --sim-hints= and --kernel-variant=
2206 options. Unknown strings are now detected and reported to the user
2209 * The semantics of stack start/end boundaries in the valgrind.h
2210 VALGRIND_STACK_REGISTER client request has been clarified and
2211 documented. The convention is that start and end are respectively
2212 the lowest and highest addressable bytes of the stack.
2214 * ==================== FIXED BUGS ====================
2216 The following bugs have been fixed or resolved. Note that "n-i-bz"
2217 stands for "not in bugzilla" -- that is, a bug that was reported to us
2218 but never got a bugzilla entry. We encourage you to file bugs in
2219 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
2220 than mailing the developers (or mailing lists) directly -- bugs that
2221 are not entered into bugzilla tend to get forgotten about or ignored.
2223 To see details of a given bug, visit
2224 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
2225 where XXXXXX is the bug number as listed below.
2227 175819 Support for ipv6 socket reporting with --track-fds
2228 232510 make distcheck fails
2229 249435 Analyzing wine programs with callgrind triggers a crash
2230 278972 support for inlined function calls in stacktraces and suppression
2232 291310 FXSAVE instruction marks memory as undefined on amd64
2233 303536 ioctl for SIOCETHTOOL (ethtool(8)) isn't wrapped
2234 308729 vex x86->IR: unhandled instruction bytes 0xf 0x5 (syscall)
2235 315199 vgcore file for threaded app does not show which thread crashed
2236 315952 tun/tap ioctls are not supported
2237 323178 Unhandled instruction: PLDW register (ARM)
2238 323179 Unhandled instruction: PLDW immediate (ARM)
2239 324050 Helgrind: SEGV because of unaligned stack when using movdqa
2240 325110 Add test-cases for Power ISA 2.06 insns: divdo/divdo. and divduo/divduo.
2241 325124 [MIPSEL] Compilation error
2242 325477 Phase 4 support for IBM Power ISA 2.07
2243 325538 cavium octeon mips64, valgrind reported "dumping core" [...]
2244 325628 Phase 5 support for IBM Power ISA 2.07
2245 325714 Empty vgcore but RLIMIT_CORE is big enough (too big)
2246 325751 Missing the two privileged Power PC Transactional Memory Instructions
2247 325816 Phase 6 support for IBM Power ISA 2.07
2248 325856 Make SGCheck fail gracefully on unsupported platforms
2249 326026 Iop names for count leading zeros/sign bits incorrectly imply [..]
2250 326436 DRD: False positive in libstdc++ std::list::push_back
2251 326444 Cavium MIPS Octeon Specific Load Indexed Instructions
2252 326462 Refactor vgdb to isolate invoker stuff into separate module
2253 326469 amd64->IR: 0x66 0xF 0x3A 0x63 0xC1 0xE (pcmpistri 0x0E)
2254 326623 DRD: false positive conflict report in a field assignment
2255 326724 Valgrind does not compile on OSX 1.9 Mavericks
2256 326816 Intercept for __strncpy_sse2_unaligned missing?
2257 326921 coregrind fails to compile m_trampoline.S with MIPS/Linux port of V
2258 326983 Clear direction flag after tests on amd64.
2259 327212 Do not prepend the current directory to absolute path names.
2260 327223 Support for Cavium MIPS Octeon Atomic and Count Instructions
2261 327238 Callgrind Assertion 'passed <= last_bb->cjmp_count' failed
2262 327284 s390x: Fix translation of the risbg instruction
2263 327639 vex amd64->IR pcmpestri SSE4.2 instruction is unsupported 0x34
2264 327837 dwz compressed alternate .debug_info and .debug_str not read correctly
2265 327916 DW_TAG_typedef may have no name
2266 327943 s390x: add a redirection for the 'index' function
2267 328100 XABORT not implemented
2268 328205 Implement additional Xen hypercalls
2269 328454 add support Backtraces with ARM unwind tables (EXIDX)
2270 328455 s390x: SIGILL after emitting wrong register pair for ldxbr
2271 328711 valgrind.1 manpage "memcheck options" section is badly generated
2272 328878 vex amd64->IR pcmpestri SSE4.2 instruction is unsupported 0x14
2273 329612 Incorrect handling of AT_BASE for image execution
2274 329694 clang warns about using uninitialized variable
2275 329956 valgrind crashes when lmw/stmw instructions are used on ppc64
2276 330228 mmap must align to VKI_SHMLBA on mips32
2277 330257 LLVM does not support `-mno-dynamic-no-pic` option
2278 330319 amd64->IR: unhandled instruction bytes: 0xF 0x1 0xD5 (xend)
2279 330459 --track-fds=yes doesn't track eventfds
2280 330469 Add clock_adjtime syscall support
2281 330594 Missing sysalls on PowerPC / uClibc
2282 330622 Add test to regression suite for POWER instruction: dcbzl
2283 330939 Support for AMD's syscall instruction on x86
2285 330941 Typo in PRE(poll) syscall wrapper
2286 331057 unhandled instruction: 0xEEE01B20 (vfma.f64) (has patch)
2287 331254 Fix expected output for memcheck/tests/dw4
2288 331255 Fix race condition in test none/tests/coolo_sigaction
2289 331257 Fix type of jump buffer in test none/tests/faultstatus
2290 331305 configure uses bash specific syntax
2291 331337 s390x WARNING: unhandled syscall: 326 (dup3)
2292 331380 Syscall param timer_create(evp) points to uninitialised byte(s)
2293 331476 Patch to handle ioctl 0x5422 on Linux (x86 and amd64)
2294 331829 Unexpected ioctl opcode sign extension
2295 331830 ppc64: WARNING: unhandled syscall: 96/97
2296 331839 drd/tests/sem_open specifies invalid semaphore name
2297 331847 outcome of drd/tests/thread_name is nondeterministic
2298 332037 Valgrind cannot handle Thumb "add pc, reg"
2299 332055 drd asserts on platforms with VG_STACK_REDZONE_SZB == 0 and
2300 consistency checks enabled
2301 332263 intercepts for pthread_rwlock_timedrdlock and
2302 pthread_rwlock_timedwrlock are incorrect
2303 332265 drd could do with post-rwlock_init and pre-rwlock_destroy
2305 332276 Implement additional Xen hypercalls
2306 332658 ldrd.w r1, r2, [PC, #imm] does not adjust for 32bit alignment
2307 332765 Fix ms_print to create temporary files in a proper directory
2308 333072 drd: Add semaphore annotations
2309 333145 Tests for missaligned PC+#imm access for arm
2310 333228 AAarch64 Missing instruction encoding: mrs %[reg], ctr_el0
2311 333230 AAarch64 missing instruction encodings: dc, ic, dsb.
2312 333248 WARNING: unhandled syscall: unix:443
2313 333428 ldr.w pc [rD, #imm] instruction leads to assertion
2314 333501 cachegrind: assertion: Cache set count is not a power of two.
2317 333666 Recognize MPX instructions and bnd prefix.
2318 333788 Valgrind does not support the CDROM_DISC_STATUS ioctl (has patch)
2319 333817 Valgrind reports the memory areas written to by the SG_IO
2321 334049 lzcnt fails silently (x86_32)
2322 334384 Valgrind does not have support Little Endian support for
2324 334585 recvmmsg unhandled (+patch) (arm)
2325 334705 sendmsg and recvmsg should guard against bogus msghdr fields.
2326 334727 Build fails with -Werror=format-security
2327 334788 clarify doc about --log-file initial program directory
2328 334834 PPC64 Little Endian support, patch 2
2329 334836 PPC64 Little Endian support, patch 3 testcase fixes
2330 334936 patch to fix false positives on alsa SNDRV_CTL_* ioctls
2331 335034 Unhandled ioctl: HCIGETDEVLIST
2332 335155 vgdb, fix error print statement.
2333 335262 arm64: movi 8bit version is not supported
2334 335263 arm64: dmb instruction is not implemented
2335 335441 unhandled ioctl 0x8905 (SIOCATMARK) when running wine under valgrind
2336 335496 arm64: sbc/abc instructions are not implemented
2337 335554 arm64: unhandled instruction: abs
2338 335564 arm64: unhandled instruction: fcvtpu Xn, Sn
2339 335735 arm64: unhandled instruction: cnt
2340 335736 arm64: unhandled instruction: uaddlv
2341 335848 arm64: unhandled instruction: {s,u}cvtf
2342 335902 arm64: unhandled instruction: sli
2343 335903 arm64: unhandled instruction: umull (vector)
2344 336055 arm64: unhandled instruction: mov (element)
2345 336062 arm64: unhandled instruction: shrn{,2}
2346 336139 mip64: [...] valgrind hangs and spins on a single core [...]
2347 336189 arm64: unhandled Instruction: mvn
2348 336435 Valgrind hangs in pthread_spin_lock consuming 100% CPU
2349 336619 valgrind --read-var-info=yes doesn't handle DW_TAG_restrict_type
2350 336772 Make moans about unknown ioctls more informative
2351 336957 Add a section about the Solaris/illumos port on the webpage
2352 337094 ifunc wrapper is broken on ppc64
2353 337285 fcntl commands F_OFD_SETLK, F_OFD_SETLKW, and F_OFD_GETLK not supported
2354 337528 leak check heuristic for block prefixed by length as 64bit number
2355 337740 Implement additional Xen hypercalls
2356 337762 guest_arm64_toIR.c:4166 (dis_ARM64_load_store): Assertion `0' failed.
2357 337766 arm64-linux: unhandled syscalls mlock (228) and mlockall (230)
2358 337871 deprecate --db-attach
2359 338023 Add support for all V4L2/media ioctls
2360 338024 inlined functions are not shown if DW_AT_ranges is used
2361 338106 Add support for 'kcmp' syscall
2362 338115 DRD: computed conflict set differs from actual after fork
2363 338160 implement display of thread local storage in gdbsrv
2364 338205 configure.ac and check for -Wno-tautological-compare
2365 338300 coredumps are missing one byte of every segment
2366 338445 amd64 vbit-test fails with unknown opcodes used by arm64 VEX
2367 338499 --sim-hints parsing broken due to wrong order in tokens
2368 338615 suppress glibc 2.20 optimized strcmp implementation for ARMv7
2369 338681 Unable to unwind through clone thread created on i386-linux
2370 338698 race condition between gdbsrv and vgdb on startup
2371 338703 helgrind on arm-linux gets false positives in dynamic loader
2372 338791 alt dwz files can be relative of debug/main file
2373 338878 on MacOS: assertion 'VG_IS_PAGE_ALIGNED(clstack_end+1)' failed
2374 338932 build V-trunk with gcc-trunk
2375 338974 glibc 2.20 changed size of struct sigaction sa_flags field on s390
2376 345079 Fix build problems in VEX/useful/test_main.c
2377 n-i-bz Fix KVM_CREATE_IRQCHIP ioctl handling
2378 n-i-bz s390x: Fix memory corruption for multithreaded applications
2379 n-i-bz vex arm->IR: allow PC as basereg in some LDRD cases
2380 n-i-bz internal error in Valgrind if vgdb transmit signals when ptrace invoked
2381 n-i-bz Fix mingw64 support in valgrind.h (dev@, 9 May 2014)
2382 n-i-bz drd manual: Document how to C++11 programs that use class "std::thread"
2383 n-i-bz Add command-line option --default-suppressions
2384 n-i-bz Add support for BLKDISCARDZEROES ioctl
2385 n-i-bz ppc32/64: fix a regression with the mtfsb0/mtfsb1 instructions
2386 n-i-bz Add support for sys_pivot_root and sys_unshare
2388 (3.10.0.BETA1: 2 September 2014, vex r2940, valgrind r14428)
2389 (3.10.0.BETA2: 8 September 2014, vex r2950, valgrind r14503)
2390 (3.10.0: 10 September 2014, vex r2950, valgrind r14514)
2394 Release 3.9.0 (31 October 2013)
2395 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2396 3.9.0 is a feature release with many improvements and the usual
2397 collection of bug fixes.
2399 This release supports X86/Linux, AMD64/Linux, ARM/Linux, PPC32/Linux,
2400 PPC64/Linux, S390X/Linux, MIPS32/Linux, MIPS64/Linux, ARM/Android,
2401 X86/Android, X86/MacOSX 10.7 and AMD64/MacOSX 10.7. Support for
2402 MacOSX 10.8 is significantly improved relative to the 3.8.0 release.
2404 * ================== PLATFORM CHANGES =================
2406 * Support for MIPS64 LE and BE running Linux. Valgrind has been
2407 tested on MIPS64 Debian Squeeze and Debian Wheezy distributions.
2409 * Support for MIPS DSP ASE on MIPS32 platforms.
2411 * Support for s390x Decimal Floating Point instructions on hosts that
2412 have the DFP facility installed.
2414 * Support for POWER8 (Power ISA 2.07) instructions
2416 * Support for Intel AVX2 instructions. This is available only on 64
2419 * Initial support for Intel Transactional Synchronization Extensions,
2422 * Initial support for Hardware Transactional Memory on POWER.
2424 * Improved support for MacOSX 10.8 (64-bit only). Memcheck can now
2425 run large GUI apps tolerably well.
2427 * ==================== TOOL CHANGES ====================
2431 - Improvements in handling of vectorised code, leading to
2432 significantly fewer false error reports. You need to use the flag
2433 --partial-loads-ok=yes to get the benefits of these changes.
2435 - Better control over the leak checker. It is now possible to
2436 specify which leak kinds (definite/indirect/possible/reachable)
2437 should be displayed, which should be regarded as errors, and which
2438 should be suppressed by a given leak suppression. This is done
2439 using the options --show-leak-kinds=kind1,kind2,..,
2440 --errors-for-leak-kinds=kind1,kind2,.. and an optional
2441 "match-leak-kinds:" line in suppression entries, respectively.
2443 Note that generated leak suppressions contain this new line and
2444 are therefore more specific than in previous releases. To get the
2445 same behaviour as previous releases, remove the "match-leak-kinds:"
2446 line from generated suppressions before using them.
2448 - Reduced "possible leak" reports from the leak checker by the use
2449 of better heuristics. The available heuristics provide detection
2450 of valid interior pointers to std::stdstring, to new[] allocated
2451 arrays with elements having destructors and to interior pointers
2452 pointing to an inner part of a C++ object using multiple
2453 inheritance. They can be selected individually using the
2454 option --leak-check-heuristics=heur1,heur2,...
2456 - Better control of stacktrace acquisition for heap-allocated
2457 blocks. Using the --keep-stacktraces option, it is possible to
2458 control independently whether a stack trace is acquired for each
2459 allocation and deallocation. This can be used to create better
2460 "use after free" errors or to decrease Valgrind's resource
2461 consumption by recording less information.
2463 - Better reporting of leak suppression usage. The list of used
2464 suppressions (shown when the -v option is given) now shows, for
2465 each leak suppressions, how many blocks and bytes it suppressed
2466 during the last leak search.
2470 - False errors resulting from the use of statically initialised
2471 mutexes and condition variables (PTHREAD_MUTEX_INITIALISER, etc)
2474 - False errors resulting from the use of pthread_cond_waits that
2475 timeout, have been removed.
2477 * ==================== OTHER CHANGES ====================
2479 * Some attempt to tune Valgrind's space requirements to the expected
2480 capabilities of the target:
2482 - The default size of the translation cache has been reduced from 8
2483 sectors to 6 on Android platforms, since each sector occupies
2484 about 40MB when using Memcheck.
2486 - The default size of the translation cache has been increased to 16
2487 sectors on all other platforms, reflecting the fact that large
2488 applications require instrumentation and storage of huge amounts
2489 of code. For similar reasons, the number of memory mapped
2490 segments that can be tracked has been increased by a factor of 6.
2492 - In all cases, the maximum number of sectors in the translation
2493 cache can be controlled by the new flag --num-transtab-sectors.
2495 * Changes in how debug info (line numbers, etc) is read:
2497 - Valgrind no longer temporarily mmaps the entire object to read
2498 from it. Instead, reading is done through a small fixed sized
2499 buffer. This avoids virtual memory usage spikes when Valgrind
2500 reads debuginfo from large shared objects.
2502 - A new experimental remote debug info server. Valgrind can read
2503 debug info from a different machine (typically, a build host)
2504 where debuginfo objects are stored. This can save a lot of time
2505 and hassle when running Valgrind on resource-constrained targets
2506 (phones, tablets) when the full debuginfo objects are stored
2507 somewhere else. This is enabled by the --debuginfo-server=
2510 - Consistency checking between main and debug objects can be
2511 disabled using the --allow-mismatched-debuginfo option.
2513 * Stack unwinding by stack scanning, on ARM. Unwinding by stack
2514 scanning can recover stack traces in some cases when the normal
2515 unwind mechanisms fail. Stack scanning is best described as "a
2516 nasty, dangerous and misleading hack" and so is disabled by default.
2517 Use --unw-stack-scan-thresh and --unw-stack-scan-frames to enable
2520 * Detection and merging of recursive stack frame cycles. When your
2521 program has recursive algorithms, this limits the memory used by
2522 Valgrind for recorded stack traces and avoids recording
2523 uninteresting repeated calls. This is controlled by the command
2524 line option --merge-recursive-frame and by the monitor command
2525 "v.set merge-recursive-frames".
2527 * File name and line numbers for used suppressions. The list of used
2528 suppressions (shown when the -v option is given) now shows, for each
2529 used suppression, the file name and line number where the suppression
2532 * New and modified GDB server monitor features:
2534 - valgrind.h has a new client request, VALGRIND_MONITOR_COMMAND,
2535 that can be used to execute gdbserver monitor commands from the
2538 - A new monitor command, "v.info open_fds", that gives the list of
2539 open file descriptors and additional details.
2541 - An optional message in the "v.info n_errs_found" monitor command,
2542 for example "v.info n_errs_found test 1234 finished", allowing a
2543 comment string to be added to the process output, perhaps for the
2544 purpose of separating errors of different tests or test phases.
2546 - A new monitor command "v.info execontext" that shows information
2547 about the stack traces recorded by Valgrind.
2549 - A new monitor command "v.do expensive_sanity_check_general" to run
2550 some internal consistency checks.
2552 * New flag --sigill-diagnostics to control whether a diagnostic
2553 message is printed when the JIT encounters an instruction it can't
2554 translate. The actual behavior -- delivery of SIGILL to the
2555 application -- is unchanged.
2557 * The maximum amount of memory that Valgrind can use on 64 bit targets
2558 has been increased from 32GB to 64GB. This should make it possible
2559 to run applications on Memcheck that natively require up to about 35GB.
2561 * ==================== FIXED BUGS ====================
2563 The following bugs have been fixed or resolved. Note that "n-i-bz"
2564 stands for "not in bugzilla" -- that is, a bug that was reported to us
2565 but never got a bugzilla entry. We encourage you to file bugs in
2566 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
2567 than mailing the developers (or mailing lists) directly -- bugs that
2568 are not entered into bugzilla tend to get forgotten about or ignored.
2570 To see details of a given bug, visit
2571 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
2572 where XXXXXX is the bug number as listed below.
2574 123837 system call: 4th argument is optional, depending on cmd
2575 135425 memcheck should tell you where Freed blocks were Mallocd
2576 164485 VG_N_SEGNAMES and VG_N_SEGMENTS are (still) too small
2577 207815 Adds some of the drm ioctls to syswrap-linux.c
2578 251569 vex amd64->IR: 0xF 0x1 0xF9 0xBF 0x90 0xD0 0x3 0x0 (RDTSCP)
2579 252955 Impossible to compile with ccache
2580 253519 Memcheck reports auxv pointer accesses as invalid reads.
2581 263034 Crash when loading some PPC64 binaries
2582 269599 Increase deepest backtrace
2583 274695 s390x: Support "compare to/from logical" instructions (z196)
2584 275800 s390x: Autodetect cache info (part 2)
2585 280271 Valgrind reports possible memory leaks on still-reachable std::string
2586 284540 Memcheck shouldn't count suppressions matching still-reachable [..]
2587 289578 Backtraces with ARM unwind tables (stack scan flags)
2588 296311 Wrong stack traces due to -fomit-frame-pointer (x86)
2589 304832 ppc32: build failure
2590 305431 Use find_buildid shdr fallback for separate .debug files
2591 305728 Add support for AVX2 instructions
2592 305948 ppc64: code generation for ShlD64 / ShrD64 asserts
2593 306035 s390x: Fix IR generation for LAAG and friends
2594 306054 s390x: Condition code computation for convert-to-int/logical
2595 306098 s390x: alternate opcode form for convert to/from fixed
2596 306587 Fix cache line detection from auxiliary vector for PPC.
2597 306783 Mips unhandled syscall : 4025 / 4079 / 4182
2598 307038 DWARF2 CFI reader: unhandled DW_OP_ opcode 0x8 (DW_OP_const1u et al)
2599 307082 HG false positive: pthread_cond_destroy: destruction of unknown CV
2600 307101 sys_capget second argument can be NULL
2601 307103 sys_openat: If pathname is absolute, then dirfd is ignored.
2602 307106 amd64->IR: f0 0f c0 02 (lock xadd byte)
2603 307113 s390x: DFP support
2604 307141 valgrind does't work in mips-linux system
2605 307155 filter_gdb should filter out syscall-template.S T_PSEUDO
2606 307285 x86_amd64 feature test for avx in test suite is wrong
2607 307290 memcheck overlap testcase needs memcpy version filter
2608 307463 Please add "&limit=0" to the "all open bugs" link
2609 307465 --show-possibly-lost=no should reduce the error count / exit code
2610 307557 Leaks on Mac OS X 10.7.5 libraries at ImageLoader::recursiveInit[..]
2611 307729 pkgconfig support broken valgrind.pc
2612 307828 Memcheck false errors SSE optimized wcscpy, wcscmp, wcsrchr, wcschr
2613 307955 Building valgrind 3.7.0-r4 fails in Gentoo AMD64 when using clang
2614 308089 Unhandled syscall on ppc64: prctl
2615 308135 PPC32 MPC8xx has 16 bytes cache size
2616 308321 testsuite memcheck filter interferes with gdb_filter
2618 308341 vgdb should report process exit (or fatal signal)
2619 308427 s390 memcheck reports tsearch cjump/cmove depends on uninit
2620 308495 Remove build dependency on installed Xen headers
2621 308573 Internal error on 64-bit instruction executed in 32-bit mode
2623 308627 pmovmskb validity bit propagation is imprecise
2624 308644 vgdb command for having the info for the track-fds option
2625 308711 give more info about aspacemgr and arenas in out_of_memory
2626 308717 ARM: implement fixed-point VCVT.F64.[SU]32
2627 308718 ARM implement SMLALBB family of instructions
2628 308886 Missing support for PTRACE_SET/GETREGSET
2629 308930 syscall name_to_handle_at (303 on amd64) not handled
2630 309229 V-bit tester does not report number of tests generated
2631 309323 print unrecognized instuction on MIPS
2632 309425 Provide a --sigill-diagnostics flag to suppress illegal [..]
2633 309427 SSE optimized stpncpy trigger uninitialised value [..] errors
2634 309430 Self hosting ppc64 encounters a vassert error on operand type
2635 309600 valgrind is a bit confused about 0-sized sections
2636 309823 Generate errors for still reachable blocks
2637 309921 PCMPISTRI validity bit propagation is imprecise
2638 309922 none/tests/ppc64/test_dfp5 sometimes fails
2639 310169 The Iop_CmpORD class of Iops is not supported by the vbit checker.
2640 310424 --read-var-info does not properly describe static variables
2641 310792 search additional path for debug symbols
2642 310931 s390x: Message-security assist (MSA) instruction extension [..]
2643 311100 PPC DFP implementation of the integer operands is inconsistent [..]
2644 311318 ARM: "128-bit constant is not implemented" error message
2645 311407 ssse3 bcopy (actually converted memcpy) causes invalid read [..]
2646 311690 V crashes because it redirects branches inside of a redirected function
2647 311880 x86_64: make regtest hangs at shell_valid1
2648 311922 WARNING: unhandled syscall: 170
2650 312171 ppc: insn selection for DFP
2651 312571 Rounding mode call wrong for the DFP Iops [..]
2652 312620 Change to Iop_D32toD64 [..] for s390 DFP support broke ppc [..]
2653 312913 Dangling pointers error should also report the alloc stack trace
2654 312980 Building on Mountain Lion generates some compiler warnings
2655 313267 Adding MIPS64/Linux port to Valgrind
2658 313811 Buffer overflow in assert_fail
2659 314099 coverity pointed out error in VEX guest_ppc_toIR.c insn_suffix
2660 314269 ppc: dead code in insn selection
2661 314718 ARM: implement integer divide instruction (sdiv and udiv)
2662 315345 cl-format.xml and callgrind/dump.c don't agree on using cfl= or cfi=
2663 315441 sendmsg syscall should ignore unset msghdr msg_flags
2664 315534 msgrcv inside a thread causes valgrind to hang (block)
2665 315545 Assertion '(UChar*)sec->tt[tteNo].tcptr <= (UChar*)hcode' failed
2666 315689 disInstr(thumb): unhandled instruction: 0xF852 0x0E10 (LDRT)
2667 315738 disInstr(arm): unhandled instruction: 0xEEBE0BEE (vcvt.s32.f64)
2668 315959 valgrind man page has bogus SGCHECK (and no BBV) OPTIONS section
2669 316144 valgrind.1 manpage contains unknown ??? strings [..]
2670 316145 callgrind command line options in manpage reference (unknown) [..]
2671 316145 callgrind command line options in manpage reference [..]
2672 316181 drd: Fixed a 4x slowdown for certain applications
2673 316503 Valgrind does not support SSE4 "movntdqa" instruction
2674 316535 Use of |signed int| instead of |size_t| in valgrind messages
2675 316696 fluidanimate program of parsec 2.1 stuck
2676 316761 syscall open_by_handle_at (304 on amd64, 342 on x86) not handled
2677 317091 Use -Wl,-Ttext-segment when static linking if possible [..]
2678 317186 "Impossible happens" when occurs VCVT instruction on ARM
2679 317318 Support for Threading Building Blocks "scalable_malloc"
2680 317444 amd64->IR: 0xC4 0x41 0x2C 0xC2 0xD2 0x8 (vcmpeq_uqps)
2681 317461 Fix BMI assembler configure check and avx2/bmi/fma vgtest prereqs
2682 317463 bmi testcase IR SANITY CHECK FAILURE
2683 317506 memcheck/tests/vbit-test fails with unknown opcode after [..]
2684 318050 libmpiwrap fails to compile with out-of-source build
2685 318203 setsockopt handling needs to handle SOL_SOCKET/SO_ATTACH_FILTER
2686 318643 annotate_trace_memory tests infinite loop on arm and ppc [..]
2687 318773 amd64->IR: 0xF3 0x48 0x0F 0xBC 0xC2 0xC3 0x66 0x0F
2688 318929 Crash with: disInstr(thumb): 0xF321 0x0001 (ssat16)
2689 318932 Add missing PPC64 and PPC32 system call support
2690 319235 --db-attach=yes is broken with Yama (ptrace scoping) enabled
2691 319395 Crash with unhandled instruction on STRT (Thumb) instructions
2692 319494 VEX Makefile-gcc standalone build update after r2702
2693 319505 [MIPSEL] Crash: unhandled UNRAY operator.
2694 319858 disInstr(thumb): unhandled instruction on instruction STRBT
2695 319932 disInstr(thumb): unhandled instruction on instruction STRHT
2696 320057 Problems when we try to mmap more than 12 memory pages on MIPS32
2697 320063 Memory from PTRACE_GET_THREAD_AREA is reported uninitialised
2698 320083 disInstr(thumb): unhandled instruction on instruction LDRBT
2699 320116 bind on AF_BLUETOOTH produces warnings because of sockaddr_rc padding
2700 320131 WARNING: unhandled syscall: 369 on ARM (prlimit64)
2701 320211 Stack buffer overflow in ./coregrind/m_main.c with huge TMPDIR
2702 320661 vgModuleLocal_read_elf_debug_info(): "Assertion '!di->soname'
2703 320895 add fanotify support (patch included)
2704 320998 vex amd64->IR pcmpestri and pcmpestrm SSE4.2 instruction
2705 321065 Valgrind updates for Xen 4.3
2706 321148 Unhandled instruction: PLI (Thumb 1, 2, 3)
2707 321363 Unhandled instruction: SSAX (ARM + Thumb)
2708 321364 Unhandled instruction: SXTAB16 (ARM + Thumb)
2709 321466 Unhandled instruction: SHASX (ARM + Thumb)
2710 321467 Unhandled instruction: SHSAX (ARM + Thumb)
2711 321468 Unhandled instruction: SHSUB16 (ARM + Thumb)
2712 321619 Unhandled instruction: SHSUB8 (ARM + Thumb)
2713 321620 Unhandled instruction: UASX (ARM + Thumb)
2714 321621 Unhandled instruction: USAX (ARM + Thumb)
2715 321692 Unhandled instruction: UQADD16 (ARM + Thumb)
2716 321693 Unhandled instruction: LDRSBT (Thumb)
2717 321694 Unhandled instruction: UQASX (ARM + Thumb)
2718 321696 Unhandled instruction: UQSAX (Thumb + ARM)
2719 321697 Unhandled instruction: UHASX (ARM + Thumb)
2720 321703 Unhandled instruction: UHSAX (ARM + Thumb)
2721 321704 Unhandled instruction: REVSH (ARM + Thumb)
2722 321730 Add cg_diff and cg_merge man pages
2723 321738 Add vgdb and valgrind-listener man pages
2725 321891 Unhandled instruction: LDRHT (Thumb)
2726 321960 pthread_create() then alloca() causing invalid stack write errors
2727 321969 ppc32 and ppc64 don't support [lf]setxattr
2728 322254 Show threadname together with tid if set by application
2729 322294 Add initial support for IBM Power ISA 2.07
2730 322368 Assertion failure in wqthread_hijack under OS X 10.8
2731 322563 vex mips->IR: 0x70 0x83 0xF0 0x3A
2732 322807 VALGRIND_PRINTF_BACKTRACE writes callstack to xml and text to stderr
2733 322851 0bXXX binary literal syntax is not standard
2734 323035 Unhandled instruction: LDRSHT(Thumb)
2735 323036 Unhandled instruction: SMMLS (ARM and Thumb)
2736 323116 The memcheck/tests/ppc64/power_ISA2_05.c fails to build [..]
2737 323175 Unhandled instruction: SMLALD (ARM + Thumb)
2738 323177 Unhandled instruction: SMLSLD (ARM + Thumb)
2739 323432 Calling pthread_cond_destroy() or pthread_mutex_destroy() [..]
2740 323437 Phase 2 support for IBM Power ISA 2.07
2741 323713 Support mmxext (integer sse) subset on i386 (athlon)
2742 323803 Transactional memory instructions are not supported for Power
2743 323893 SSE3 not available on amd cpus in valgrind
2744 323905 Probable false positive from Valgrind/drd on close()
2745 323912 valgrind.h header isn't compatible for mingw64
2746 324047 Valgrind doesn't support [LDR,ST]{S}[B,H]T ARM instructions
2747 324149 helgrind: When pthread_cond_timedwait returns ETIMEDOUT [..]
2748 324181 mmap does not handle MAP_32BIT
2749 324227 memcheck false positive leak when a thread calls exit+block [..]
2750 324421 Support for fanotify API on ARM architecture
2751 324514 gdbserver monitor cmd output behaviour consistency [..]
2752 324518 ppc64: Emulation of dcbt instructions does not handle [..]
2753 324546 none/tests/ppc32 test_isa_2_07_part2 requests -m64
2754 324582 When access is made to freed memory, report both allocation [..]
2755 324594 Fix overflow computation for Power ISA 2.06 insns: mulldo/mulldo.
2756 324765 ppc64: illegal instruction when executing none/tests/ppc64/jm-misc
2757 324816 Incorrect VEX implementation for xscvspdp/xvcvspdp for SNaN inputs
2758 324834 Unhandled instructions in Microsoft C run-time for x86_64
2759 324894 Phase 3 support for IBM Power ISA 2.07
2760 326091 drd: Avoid false race reports from optimized strlen() impls
2761 326113 valgrind libvex hwcaps error on AMD64
2762 n-i-bz Some wrong command line options could be ignored
2763 n-i-bz patch to allow fair-sched on android
2764 n-i-bz report error for vgdb snapshot requested before execution
2765 n-i-bz same as 303624 (fixed in 3.8.0), but for x86 android
2767 (3.9.0: 31 October 2013, vex r2796, valgrind r13708)
2771 Release 3.8.1 (19 September 2012)
2772 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2773 3.8.1 is a bug fix release. It fixes some assertion failures in 3.8.0
2774 that occur moderately frequently in real use cases, adds support for
2775 some missing instructions on ARM, and fixes a deadlock condition on
2776 MacOSX. If you package or deliver 3.8.0 for others to use, you might
2777 want to consider upgrading to 3.8.1 instead.
2779 The following bugs have been fixed or resolved. Note that "n-i-bz"
2780 stands for "not in bugzilla" -- that is, a bug that was reported to us
2781 but never got a bugzilla entry. We encourage you to file bugs in
2782 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
2783 than mailing the developers (or mailing lists) directly -- bugs that
2784 are not entered into bugzilla tend to get forgotten about or ignored.
2786 To see details of a given bug, visit
2787 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
2788 where XXXXXX is the bug number as listed below.
2791 289584 Unhandled instruction: 0xF 0x29 0xE5 (MOVAPS)
2792 295808 amd64->IR: 0xF3 0xF 0xBC 0xC0 (TZCNT)
2793 298281 wcslen causes false(?) uninitialised value warnings
2794 301281 valgrind hangs on OS X when the process calls system()
2795 304035 disInstr(arm): unhandled instruction 0xE1023053
2796 304867 implement MOVBE instruction in x86 mode
2797 304980 Assertion 'lo <= hi' failed in vgModuleLocal_find_rx_mapping
2798 305042 amd64: implement 0F 7F encoding of movq between two registers
2799 305199 ARM: implement QDADD and QDSUB
2800 305321 amd64->IR: 0xF 0xD 0xC (prefetchw)
2801 305513 killed by fatal signal: SIGSEGV
2802 305690 DRD reporting invalid semaphore when sem_trywait fails
2803 305926 Invalid alignment checks for some AVX instructions
2804 306297 disInstr(thumb): unhandled instruction 0xE883 0x000C
2805 306310 3.8.0 release tarball missing some files
2806 306612 RHEL 6 glibc-2.X default suppressions need /lib*/libc-*patterns
2807 306664 vex amd64->IR: 0x66 0xF 0x3A 0x62 0xD1 0x46 0x66 0xF
2808 n-i-bz shmat of a segment > 4Gb does not work
2809 n-i-bz simulate_control_c script wrong USR1 signal number on mips
2810 n-i-bz vgdb ptrace calls wrong on mips [...]
2811 n-i-bz Fixes for more MPI false positives
2812 n-i-bz exp-sgcheck's memcpy causes programs to segfault
2813 n-i-bz OSX build w/ clang: asserts at startup
2814 n-i-bz Incorrect undef'dness prop for Iop_DPBtoBCD and Iop_BCDtoDPB
2815 n-i-bz fix a couple of union tag-vs-field mixups
2816 n-i-bz OSX: use __NR_poll_nocancel rather than __NR_poll
2818 The following bugs were fixed in 3.8.0 but not listed in this NEWS
2821 254088 Valgrind should know about UD2 instruction
2824 304754 NEWS blows TeX's little mind
2826 (3.8.1: 19 September 2012, vex r2537, valgrind r12996)
2830 Release 3.8.0 (10 August 2012)
2831 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2832 3.8.0 is a feature release with many improvements and the usual
2833 collection of bug fixes.
2835 This release supports X86/Linux, AMD64/Linux, ARM/Linux, PPC32/Linux,
2836 PPC64/Linux, S390X/Linux, MIPS/Linux, ARM/Android, X86/Android,
2837 X86/MacOSX 10.6/10.7 and AMD64/MacOSX 10.6/10.7. Support for recent
2838 distros and toolchain components (glibc 2.16, gcc 4.7) has been added.
2839 There is initial support for MacOSX 10.8, but it is not usable for
2840 serious work at present.
2842 * ================== PLATFORM CHANGES =================
2844 * Support for MIPS32 platforms running Linux. Valgrind has been
2845 tested on MIPS32 and MIPS32r2 platforms running different Debian
2846 Squeeze and MeeGo distributions. Both little-endian and big-endian
2847 cores are supported. The tools Memcheck, Massif and Lackey have
2848 been tested and are known to work. See README.mips for more details.
2850 * Preliminary support for Android running on x86.
2852 * Preliminary (as-yet largely unusable) support for MacOSX 10.8.
2854 * Support for Intel AVX instructions and for AES instructions. This
2855 support is available only for 64 bit code.
2857 * Support for POWER Decimal Floating Point instructions.
2859 * ==================== TOOL CHANGES ====================
2861 * Non-libc malloc implementations are now supported. This is useful
2862 for tools that replace malloc (Memcheck, Massif, DRD, Helgrind).
2863 Using the new option --soname-synonyms, such tools can be informed
2864 that the malloc implementation is either linked statically into the
2865 executable, or is present in some other shared library different
2866 from libc.so. This makes it possible to process statically linked
2867 programs, and programs using other malloc libraries, for example
2868 TCMalloc or JEMalloc.
2870 * For tools that provide their own replacement for malloc et al, the
2871 option --redzone-size=<number> allows users to specify the size of
2872 the padding blocks (redzones) added before and after each client
2873 allocated block. Smaller redzones decrease the memory needed by
2874 Valgrind. Bigger redzones increase the chance to detect blocks
2875 overrun or underrun. Prior to this change, the redzone size was
2876 hardwired to 16 bytes in Memcheck.
2880 - The leak_check GDB server monitor command now can
2881 control the maximum nr of loss records to output.
2883 - Reduction of memory use for applications allocating
2884 many blocks and/or having many partially defined bytes.
2886 - Addition of GDB server monitor command 'block_list' that lists
2887 the addresses/sizes of the blocks of a leak search loss record.
2889 - Addition of GDB server monitor command 'who_points_at' that lists
2890 the locations pointing at a block.
2892 - If a redzone size > 0 is given, VALGRIND_MALLOCLIKE_BLOCK now will
2893 detect an invalid access of these redzones, by marking them
2894 noaccess. Similarly, if a redzone size is given for a memory
2895 pool, VALGRIND_MEMPOOL_ALLOC will mark the redzones no access.
2896 This still allows to find some bugs if the user has forgotten to
2897 mark the pool superblock noaccess.
2899 - Performance of memory leak check has been improved, especially in
2900 cases where there are many leaked blocks and/or many suppression
2901 rules used to suppress leak reports.
2903 - Reduced noise (false positive) level on MacOSX 10.6/10.7, due to
2904 more precise analysis, which is important for LLVM/Clang
2905 generated code. This is at the cost of somewhat reduced
2906 performance. Note there is no change to analysis precision or
2907 costs on Linux targets.
2911 - Added even more facilities that can help finding the cause of a data
2912 race, namely the command-line option --ptrace-addr and the macro
2913 DRD_STOP_TRACING_VAR(x). More information can be found in the manual.
2915 - Fixed a subtle bug that could cause false positive data race reports.
2917 * ==================== OTHER CHANGES ====================
2919 * The C++ demangler has been updated so as to work well with C++
2920 compiled by up to at least g++ 4.6.
2922 * Tool developers can make replacement/wrapping more flexible thanks
2923 to the new option --soname-synonyms. This was reported above, but
2924 in fact is very general and applies to all function
2925 replacement/wrapping, not just to malloc-family functions.
2927 * Round-robin scheduling of threads can be selected, using the new
2928 option --fair-sched= yes. Prior to this change, the pipe-based
2929 thread serialisation mechanism (which is still the default) could
2930 give very unfair scheduling. --fair-sched=yes improves
2931 responsiveness of interactive multithreaded applications, and
2932 improves repeatability of results from the thread checkers Helgrind
2935 * For tool developers: support to run Valgrind on Valgrind has been
2936 improved. We can now routinely Valgrind on Helgrind or Memcheck.
2938 * gdbserver now shows the float shadow registers as integer
2939 rather than float values, as the shadow values are mostly
2940 used as bit patterns.
2942 * Increased limit for the --num-callers command line flag to 500.
2944 * Performance improvements for error matching when there are many
2945 suppression records in use.
2947 * Improved support for DWARF4 debugging information (bug 284184).
2949 * Initial support for DWZ compressed Dwarf debug info.
2951 * Improved control over the IR optimiser's handling of the tradeoff
2952 between performance and precision of exceptions. Specifically,
2953 --vex-iropt-precise-memory-exns has been removed and replaced by
2954 --vex-iropt-register-updates, with extended functionality. This
2955 allows the Valgrind gdbserver to always show up to date register
2958 * Modest performance gains through the use of translation chaining for
2961 * ==================== FIXED BUGS ====================
2963 The following bugs have been fixed or resolved. Note that "n-i-bz"
2964 stands for "not in bugzilla" -- that is, a bug that was reported to us
2965 but never got a bugzilla entry. We encourage you to file bugs in
2966 bugzilla (https://bugs.kde.org/enter_bug.cgi?product=valgrind) rather
2967 than mailing the developers (or mailing lists) directly -- bugs that
2968 are not entered into bugzilla tend to get forgotten about or ignored.
2970 To see details of a given bug, visit
2971 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
2972 where XXXXXX is the bug number as listed below.
2974 197914 Building valgrind from svn now requires automake-1.10
2975 203877 increase to 16Mb maximum allowed alignment for memalign et al
2976 219156 Handle statically linked malloc or other malloc lib (e.g. tcmalloc)
2977 247386 make perf does not run all performance tests
2978 270006 Valgrind scheduler unfair
2979 270777 Adding MIPS/Linux port to Valgrind
2980 270796 s390x: Removed broken support for the TS insn
2981 271438 Fix configure for proper SSE4.2 detection
2982 273114 s390x: Support TR, TRE, TROO, TROT, TRTO, and TRTT instructions
2983 273475 Add support for AVX instructions
2984 274078 improved configure logic for mpicc
2985 276993 fix mremap 'no thrash checks'
2986 278313 Fedora 15/x64: err read debug info with --read-var-info=yes flag
2987 281482 memcheck incorrect byte allocation count in realloc() for silly argument
2988 282230 group allocator for small fixed size, use it for MC_Chunk/SEc vbit
2989 283413 Fix wrong sanity check
2990 283671 Robustize alignment computation in LibVEX_Alloc
2991 283961 Adding support for some HCI IOCTLs
2992 284124 parse_type_DIE: confused by: DWARF 4
2993 284864 == 273475 (Add support for AVX instructions)
2994 285219 Too-restrictive constraints for Thumb2 "SP plus/minus register"
2995 285662 (MacOSX): Memcheck needs to replace memcpy/memmove
2996 285725 == 273475 (Add support for AVX instructions)
2997 286261 add wrapper for linux I2C_RDWR ioctl
2998 286270 vgpreload is not friendly to 64->32 bit execs, gives ld.so warnings
2999 286374 Running cachegrind with --branch-sim=yes on 64-bit PowerPC program fails
3000 286384 configure fails "checking for a supported version of gcc"
3001 286497 == 273475 (Add support for AVX instructions)
3002 286596 == 273475 (Add support for AVX instructions)
3003 286917 disInstr(arm): unhandled instruction: QADD (also QSUB)
3004 287175 ARM: scalar VFP fixed-point VCVT instructions not handled
3005 287260 Incorrect conditional jump or move depends on uninitialised value(s)
3006 287301 vex amd64->IR: 0x66 0xF 0x38 0x41 0xC0 0xB8 0x0 0x0 (PHMINPOSUW)
3007 287307 == 273475 (Add support for AVX instructions)
3008 287858 VG_(strerror): unknown error
3009 288298 (MacOSX) unhandled syscall shm_unlink
3010 288995 == 273475 (Add support for AVX instructions)
3011 289470 Loading of large Mach-O thin binaries fails.
3012 289656 == 273475 (Add support for AVX instructions)
3013 289699 vgdb connection in relay mode erroneously closed due to buffer overrun
3014 289823 == 293754 (PCMPxSTRx not implemented for 16-bit characters)
3015 289839 s390x: Provide support for unicode conversion instructions
3016 289939 monitor cmd 'leak_check' with details about leaked or reachable blocks
3017 290006 memcheck doesn't mark %xmm as initialized after "pcmpeqw %xmm %xmm"
3018 290655 Add support for AESKEYGENASSIST instruction
3019 290719 valgrind-3.7.0 fails with automake-1.11.2 due to"pkglibdir" usage
3020 290974 vgdb must align pages to VKI_SHMLBA (16KB) on ARM
3021 291253 ES register not initialised in valgrind simulation
3022 291568 Fix 3DNOW-related crashes with baseline x86_64 CPU (w patch)
3023 291865 s390x: Support the "Compare Double and Swap" family of instructions
3024 292300 == 273475 (Add support for AVX instructions)
3025 292430 unrecognized instruction in __intel_get_new_mem_ops_cpuid
3026 292493 == 273475 (Add support for AVX instructions)
3027 292626 Missing fcntl F_SETOWN_EX and F_GETOWN_EX support
3028 292627 Missing support for some SCSI ioctls
3029 292628 none/tests/x86/bug125959-x86.c triggers undefined behavior
3030 292841 == 273475 (Add support for AVX instructions)
3031 292993 implement the getcpu syscall on amd64-linux
3032 292995 Implement the “cross memory attach” syscalls introduced in Linux 3.2
3033 293088 Add some VEX sanity checks for ppc64 unhandled instructions
3034 293751 == 290655 (Add support for AESKEYGENASSIST instruction)
3035 293754 PCMPxSTRx not implemented for 16-bit characters
3036 293755 == 293754 (No tests for PCMPxSTRx on 16-bit characters)
3037 293808 CLFLUSH not supported by latest VEX for amd64
3038 294047 valgrind does not correctly emulate prlimit64(..., RLIMIT_NOFILE, ...)
3039 294048 MPSADBW instruction not implemented
3040 294055 regtest none/tests/shell fails when locale is not set to C
3041 294185 INT 0x44 (and others) not supported on x86 guest, but used by Jikes RVM
3042 294190 --vgdb-error=xxx can be out of sync with errors shown to the user
3043 294191 amd64: fnsave/frstor and 0x66 size prefixes on FP instructions
3044 294260 disInstr_AMD64: disInstr miscalculated next %rip
3045 294523 --partial-loads-ok=yes causes false negatives
3046 294617 vex amd64->IR: 0x66 0xF 0x3A 0xDF 0xD1 0x1 0xE8 0x6A
3047 294736 vex amd64->IR: 0x48 0xF 0xD7 0xD6 0x48 0x83
3048 294812 patch allowing to run (on x86 at least) helgrind/drd on tool.
3049 295089 can not annotate source for both helgrind and drd
3050 295221 POWER Processor decimal floating point instruction support missing
3051 295427 building for i386 with clang on darwin11 requires "-new_linker linker"
3052 295428 coregrind/m_main.c has incorrect x86 assembly for darwin
3053 295590 Helgrind: Assertion 'cvi->nWaiters > 0' failed
3054 295617 ARM - Add some missing syscalls
3055 295799 Missing \n with get_vbits in gdbserver when line is % 80 [...]
3056 296229 Linux user input device ioctls missing wrappers
3057 296318 ELF Debug info improvements (more than one rx/rw mapping)
3058 296422 Add translation chaining support
3059 296457 vex amd64->IR: 0x66 0xF 0x3A 0xDF 0xD1 0x1 0xE8 0x6A (dup of AES)
3060 296792 valgrind 3.7.0: add SIOCSHWTSTAMP (0x89B0) ioctl wrapper
3061 296983 Fix build issues on x86_64/ppc64 without 32-bit toolchains
3062 297078 gdbserver signal handling problems [..]
3063 297147 drd false positives on newly allocated memory
3064 297329 disallow decoding of IBM Power DFP insns on some machines
3065 297497 POWER Processor decimal floating point instruction support missing
3066 297701 Another alias for strncasecmp_l in libc-2.13.so
3067 297911 'invalid write' not reported when using APIs for custom mem allocators.
3068 297976 s390x: revisit EX implementation
3069 297991 Valgrind interferes with mmap()+ftell()
3070 297992 Support systems missing WIFCONTINUED (e.g. pre-2.6.10 Linux)
3071 297993 Fix compilation of valgrind with gcc -g3.
3072 298080 POWER Processor DFP support missing, part 3
3073 298227 == 273475 (Add support for AVX instructions)
3074 298335 == 273475 (Add support for AVX instructions)
3075 298354 Unhandled ARM Thumb instruction 0xEB0D 0x0585 (streq)
3076 298394 s390x: Don't bail out on an unknown machine model. [..]
3077 298421 accept4() syscall (366) support is missing for ARM
3078 298718 vex amd64->IR: 0xF 0xB1 0xCB 0x9C 0x8F 0x45
3079 298732 valgrind installation problem in ubuntu with kernel version 3.x
3080 298862 POWER Processor DFP instruction support missing, part 4
3081 298864 DWARF reader mis-parses DW_FORM_ref_addr
3082 298943 massif asserts with --pages-as-heap=yes when brk is changing [..]
3083 299053 Support DWARF4 DW_AT_high_pc constant form
3084 299104 == 273475 (Add support for AVX instructions)
3085 299316 Helgrind: hg_main.c:628 (map_threads_lookup): Assertion 'thr' failed.
3086 299629 dup3() syscall (358) support is missing for ARM
3087 299694 POWER Processor DFP instruction support missing, part 5
3088 299756 Ignore --free-fill for MEMPOOL_FREE and FREELIKE client requests
3089 299803 == 273475 (Add support for AVX instructions)
3090 299804 == 273475 (Add support for AVX instructions)
3091 299805 == 273475 (Add support for AVX instructions)
3092 300140 ARM - Missing (T1) SMMUL
3093 300195 == 296318 (ELF Debug info improvements (more than one rx/rw mapping))
3094 300389 Assertion `are_valid_hwcaps(VexArchAMD64, [..])' failed.
3095 300414 FCOM and FCOMP unimplemented for amd64 guest
3096 301204 infinite loop in canonicaliseSymtab with ifunc symbol
3097 301229 == 203877 (increase to 16Mb maximum allowed alignment for memalign etc)
3098 301265 add x86 support to Android build
3099 301984 configure script doesn't detect certain versions of clang
3100 302205 Fix compiler warnings for POWER VEX code and POWER test cases
3101 302287 Unhandled movbe instruction on Atom processors
3102 302370 PPC: fnmadd, fnmsub, fnmadds, fnmsubs insns always negate the result
3103 302536 Fix for the POWER Valgrind regression test: memcheck-ISA2.0.
3104 302578 Unrecognized isntruction 0xc5 0x32 0xc2 0xca 0x09 vcmpngess
3105 302656 == 273475 (Add support for AVX instructions)
3106 302709 valgrind for ARM needs extra tls support for android emulator [..]
3107 302827 add wrapper for CDROM_GET_CAPABILITY
3108 302901 Valgrind crashes with dwz optimized debuginfo
3109 302918 Enable testing of the vmaddfp and vnsubfp instructions in the testsuite
3110 303116 Add support for the POWER instruction popcntb
3111 303127 Power test suite fixes for frsqrte, vrefp, and vrsqrtefp instructions.
3112 303250 Assertion `instrs_in->arr_used <= 10000' failed w/ OpenSSL code
3113 303466 == 273475 (Add support for AVX instructions)
3114 303624 segmentation fault on Android 4.1 (e.g. on Galaxy Nexus OMAP)
3115 303963 strstr() function produces wrong results under valgrind callgrind
3116 304054 CALL_FN_xx macros need to enforce stack alignment
3117 304561 tee system call not supported
3118 715750 (MacOSX): Incorrect invalid-address errors near 0xFFFFxxxx (mozbug#)
3119 n-i-bz Add missing gdbserver xml files for shadow registers for ppc32
3120 n-i-bz Bypass gcc4.4/4.5 code gen bugs causing out of memory or asserts
3121 n-i-bz Fix assert in gdbserver for watchpoints watching the same address
3122 n-i-bz Fix false positive in sys_clone on amd64 when optional args [..]
3123 n-i-bz s390x: Shadow registers can now be examined using vgdb
3125 (3.8.0-TEST3: 9 August 2012, vex r2465, valgrind r12865)
3126 (3.8.0: 10 August 2012, vex r2465, valgrind r12866)
3130 Release 3.7.0 (5 November 2011)
3131 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3132 3.7.0 is a feature release with many significant improvements and the
3133 usual collection of bug fixes.
3135 This release supports X86/Linux, AMD64/Linux, ARM/Linux, PPC32/Linux,
3136 PPC64/Linux, S390X/Linux, ARM/Android, X86/Darwin and AMD64/Darwin.
3137 Support for recent distros and toolchain components (glibc 2.14, gcc
3138 4.6, MacOSX 10.7) has been added.
3140 * ================== PLATFORM CHANGES =================
3142 * Support for IBM z/Architecture (s390x) running Linux. Valgrind can
3143 analyse 64-bit programs running on z/Architecture. Most user space
3144 instructions up to and including z10 are supported. Valgrind has
3145 been tested extensively on z9, z10, and z196 machines running SLES
3146 10/11, RedHat 5/6m, and Fedora. The Memcheck and Massif tools are
3147 known to work well. Callgrind, Helgrind, and DRD work reasonably
3148 well on z9 and later models. See README.s390 for more details.
3150 * Preliminary support for MacOSX 10.7 and XCode 4. Both 32- and
3151 64-bit processes are supported. Some complex threaded applications
3152 (Firefox) are observed to hang when run as 32 bit applications,
3153 whereas 64-bit versions run OK. The cause is unknown. Memcheck
3154 will likely report some false errors. In general, expect some rough
3155 spots. This release also supports MacOSX 10.6, but drops support
3158 * Preliminary support for Android (on ARM). Valgrind can now run
3159 large applications (eg, Firefox) on (eg) a Samsung Nexus S. See
3160 README.android for more details, plus instructions on how to get
3163 * Support for the IBM Power ISA 2.06 (Power7 instructions)
3165 * General correctness and performance improvements for ARM/Linux, and,
3166 by extension, ARM/Android.
3168 * Further solidification of support for SSE 4.2 in 64-bit mode. AVX
3169 instruction set support is under development but is not available in
3172 * Support for AIX5 has been removed.
3174 * ==================== TOOL CHANGES ====================
3176 * Memcheck: some incremental changes:
3178 - reduction of memory use in some circumstances
3180 - improved handling of freed memory, which in some circumstances
3181 can cause detection of use-after-free that would previously have
3184 - fix of a longstanding bug that could cause false negatives (missed
3185 errors) in programs doing vector saturated narrowing instructions.
3187 * Helgrind: performance improvements and major memory use reductions,
3188 particularly for large, long running applications which perform many
3189 synchronisation (lock, unlock, etc) events. Plus many smaller
3192 - display of locksets for both threads involved in a race
3194 - general improvements in formatting/clarity of error messages
3196 - addition of facilities and documentation regarding annotation
3197 of thread safe reference counted C++ classes
3199 - new flag --check-stack-refs=no|yes [yes], to disable race checking
3200 on thread stacks (a performance hack)
3202 - new flag --free-is-write=no|yes [no], to enable detection of races
3203 where one thread accesses heap memory but another one frees it,
3204 without any coordinating synchronisation event
3206 * DRD: enabled XML output; added support for delayed thread deletion
3207 in order to detect races that occur close to the end of a thread
3208 (--join-list-vol); fixed a memory leak triggered by repeated client
3209 memory allocatation and deallocation; improved Darwin support.
3211 * exp-ptrcheck: this tool has been renamed to exp-sgcheck
3213 * exp-sgcheck: this tool has been reduced in scope so as to improve
3214 performance and remove checking that Memcheck does better.
3215 Specifically, the ability to check for overruns for stack and global
3216 arrays is unchanged, but the ability to check for overruns of heap
3217 blocks has been removed. The tool has accordingly been renamed to
3218 exp-sgcheck ("Stack and Global Array Checking").
3220 * ==================== OTHER CHANGES ====================
3222 * GDB server: Valgrind now has an embedded GDB server. That means it
3223 is possible to control a Valgrind run from GDB, doing all the usual
3224 things that GDB can do (single stepping, breakpoints, examining
3225 data, etc). Tool-specific functionality is also available. For
3226 example, it is possible to query the definedness state of variables
3227 or memory from within GDB when running Memcheck; arbitrarily large
3228 memory watchpoints are supported, etc. To use the GDB server, start
3229 Valgrind with the flag --vgdb-error=0 and follow the on-screen
3232 * Improved support for unfriendly self-modifying code: a new option
3233 --smc-check=all-non-file is available. This adds the relevant
3234 consistency checks only to code that originates in non-file-backed
3235 mappings. In effect this confines the consistency checking only to
3236 code that is or might be JIT generated, and avoids checks on code
3237 that must have been compiled ahead of time. This significantly
3238 improves performance on applications that generate code at run time.
3240 * It is now possible to build a working Valgrind using Clang-2.9 on
3243 * new client requests VALGRIND_{DISABLE,ENABLE}_ERROR_REPORTING.
3244 These enable and disable error reporting on a per-thread, and
3245 nestable, basis. This is useful for hiding errors in particularly
3246 troublesome pieces of code. The MPI wrapper library (libmpiwrap.c)
3247 now uses this facility.
3249 * Added the --mod-funcname option to cg_diff.
3251 * ==================== FIXED BUGS ====================
3253 The following bugs have been fixed or resolved. Note that "n-i-bz"
3254 stands for "not in bugzilla" -- that is, a bug that was reported to us
3255 but never got a bugzilla entry. We encourage you to file bugs in
3256 bugzilla (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than
3257 mailing the developers (or mailing lists) directly -- bugs that are
3258 not entered into bugzilla tend to get forgotten about or ignored.
3260 To see details of a given bug, visit
3261 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
3262 where XXXXXX is the bug number as listed below.
3264 79311 malloc silly arg warning does not give stack trace
3265 210935 port valgrind.h (not valgrind) to win32 to support client requests
3266 214223 valgrind SIGSEGV on startup gcc 4.4.1 ppc32 (G4) Ubuntu 9.10
3267 243404 Port to zSeries
3268 243935 Helgrind: incorrect handling of ANNOTATE_HAPPENS_BEFORE()/AFTER()
3269 247223 non-x86: Suppress warning: 'regparm' attribute directive ignored
3270 250101 huge "free" memory usage due to m_mallocfree.c fragmentation
3271 253206 Some fixes for the faultstatus testcase
3272 255223 capget testcase fails when running as root
3273 256703 xlc_dbl_u32.c testcase broken
3274 256726 Helgrind tests have broken inline asm
3275 259977 == 214223 (Valgrind segfaults doing __builtin_longjmp)
3276 264800 testcase compile failure on zseries
3277 265762 make public VEX headers compilable by G++ 3.x
3278 265771 assertion in jumps.c (r11523) fails with glibc-2.3
3279 266753 configure script does not give the user the option to not use QtCore
3280 266931 gen_insn_test.pl is broken
3281 266961 ld-linux.so.2 i?86-linux strlen issues
3282 266990 setns instruction causes false positive
3283 267020 Make directory for temporary files configurable at run-time.
3284 267342 == 267997 (segmentation fault on Mac OS 10.6)
3285 267383 Assertion 'vgPlain_strlen(dir) + vgPlain_strlen(file) + 1 < 256' failed
3286 267413 Assertion 'DRD_(g_threadinfo)[tid].synchr_nesting >= 1' failed.
3287 267488 regtest: darwin support for 64-bit build
3288 267552 SIGSEGV (misaligned_stack_error) with DRD, but not with other tools
3289 267630 Add support for IBM Power ISA 2.06 -- stage 1
3290 267769 == 267997 (Darwin: memcheck triggers segmentation fault)
3291 267819 Add client request for informing the core about reallocation
3292 267925 laog data structure quadratic for a single sequence of lock
3293 267968 drd: (vgDrd_thread_set_joinable): Assertion '0 <= (int)tid ..' failed
3294 267997 MacOSX: 64-bit V segfaults on launch when built with Xcode 4.0.1
3295 268513 missed optimizations in fold_Expr
3296 268619 s390x: fpr - gpr transfer facility
3297 268620 s390x: reconsider "long displacement" requirement
3298 268621 s390x: improve IR generation for XC
3299 268715 s390x: FLOGR is not universally available
3300 268792 == 267997 (valgrind seg faults on startup when compiled with Xcode 4)
3301 268930 s390x: MHY is not universally available
3302 269078 arm->IR: unhandled instruction SUB (SP minus immediate/register)
3303 269079 Support ptrace system call on ARM
3304 269144 missing "Bad option" error message
3305 269209 conditional load and store facility (z196)
3306 269354 Shift by zero on x86 can incorrectly clobber CC_NDEP
3307 269641 == 267997 (valgrind segfaults immediately (segmentation fault))
3308 269736 s390x: minor code generation tweaks
3309 269778 == 272986 (valgrind.h: swap roles of VALGRIND_DO_CLIENT_REQUEST() ..)
3310 269863 s390x: remove unused function parameters
3311 269864 s390x: tweak s390_emit_load_cc
3312 269884 == 250101 (overhead for huge blocks exhausts space too soon)
3313 270082 s390x: Make sure to point the PSW address to the next address on SIGILL
3314 270115 s390x: rewrite some testcases
3315 270309 == 267997 (valgrind crash on startup)
3316 270320 add support for Linux FIOQSIZE ioctl() call
3317 270326 segfault while trying to sanitize the environment passed to execle
3318 270794 IBM POWER7 support patch causes regression in none/tests
3319 270851 IBM POWER7 fcfidus instruction causes memcheck to fail
3320 270856 IBM POWER7 xsnmaddadp instruction causes memcheck to fail on 32bit app
3321 270925 hyper-optimized strspn() in /lib64/libc-2.13.so needs fix
3322 270959 s390x: invalid use of R0 as base register
3323 271042 VSX configure check fails when it should not
3324 271043 Valgrind build fails with assembler error on ppc64 with binutils 2.21
3325 271259 s390x: fix code confusion
3326 271337 == 267997 (Valgrind segfaults on MacOS X)
3327 271385 s390x: Implement Ist_MBE
3328 271501 s390x: misc cleanups
3329 271504 s390x: promote likely and unlikely
3330 271579 ppc: using wrong enum type
3331 271615 unhandled instruction "popcnt" (arch=amd10h)
3332 271730 Fix bug when checking ioctls: duplicate check
3333 271776 s390x: provide STFLE instruction support
3334 271779 s390x: provide clock instructions like STCK
3335 271799 Darwin: ioctls without an arg report a memory error
3336 271820 arm: fix type confusion
3337 271917 pthread_cond_timedwait failure leads to not-locked false positive
3338 272067 s390x: fix DISP20 macro
3339 272615 A typo in debug output in mc_leakcheck.c
3340 272661 callgrind_annotate chokes when run from paths containing regex chars
3341 272893 amd64->IR: 0x66 0xF 0x38 0x2B 0xC1 0x66 0xF 0x7F == (closed as dup)
3342 272955 Unhandled syscall error for pwrite64 on ppc64 arch
3343 272967 make documentation build-system more robust
3344 272986 Fix gcc-4.6 warnings with valgrind.h
3345 273318 amd64->IR: 0x66 0xF 0x3A 0x61 0xC1 0x38 (missing PCMPxSTRx case)
3346 273318 unhandled PCMPxSTRx case: vex amd64->IR: 0x66 0xF 0x3A 0x61 0xC1 0x38
3347 273431 valgrind segfaults in evalCfiExpr (debuginfo.c:2039)
3348 273465 Callgrind: jumps.c:164 (new_jcc): Assertion '(0 <= jmp) && ...'
3349 273536 Build error: multiple definition of `vgDrd_pthread_cond_initializer'
3350 273640 ppc64-linux: unhandled syscalls setresuid(164) and setresgid(169)
3351 273729 == 283000 (Illegal opcode for SSE2 "roundsd" instruction)
3352 273778 exp-ptrcheck: unhandled sysno == 259
3353 274089 exp-ptrcheck: unhandled sysno == 208
3354 274378 s390x: Various dispatcher tweaks
3355 274447 WARNING: unhandled syscall: 340
3356 274776 amd64->IR: 0x66 0xF 0x38 0x2B 0xC5 0x66
3357 274784 == 267997 (valgrind ls -l results in Segmentation Fault)
3358 274926 valgrind does not build against linux-3
3359 275148 configure FAIL with glibc-2.14
3360 275151 Fedora 15 / glibc-2.14 'make regtest' FAIL
3361 275168 Make Valgrind work for MacOSX 10.7 Lion
3362 275212 == 275284 (lots of false positives from __memcpy_ssse3_back et al)
3363 275278 valgrind does not build on Linux kernel 3.0.* due to silly
3364 275284 Valgrind memcpy/memmove redirection stopped working in glibc 2.14/x86_64
3365 275308 Fix implementation for ppc64 fres instruc
3366 275339 s390x: fix testcase compile warnings
3367 275517 s390x: Provide support for CKSM instruction
3368 275710 s390x: get rid of redundant address mode calculation
3369 275815 == 247894 (Valgrind doesn't know about Linux readahead(2) syscall)
3370 275852 == 250101 (valgrind uses all swap space and is killed)
3371 276784 Add support for IBM Power ISA 2.06 -- stage 3
3372 276987 gdbsrv: fix tests following recent commits
3373 277045 Valgrind crashes with unhandled DW_OP_ opcode 0x2a
3374 277199 The test_isa_2_06_part1.c in none/tests/ppc64 should be a symlink
3375 277471 Unhandled syscall: 340
3376 277610 valgrind crashes in VG_(lseek)(core_fd, phdrs[idx].p_offset, ...)
3377 277653 ARM: support Thumb2 PLD instruction
3378 277663 ARM: NEON float VMUL by scalar incorrect
3379 277689 ARM: tests for VSTn with register post-index are broken
3380 277694 ARM: BLX LR instruction broken in ARM mode
3381 277780 ARM: VMOV.F32 (immediate) instruction is broken
3382 278057 fuse filesystem syscall deadlocks
3383 278078 Unimplemented syscall 280 on ppc32
3384 278349 F_GETPIPE_SZ and F_SETPIPE_SZ Linux fcntl commands
3385 278454 VALGRIND_STACK_DEREGISTER has wrong output type
3386 278502 == 275284 (Valgrind confuses memcpy() and memmove())
3387 278892 gdbsrv: factorize gdb version handling, fix doc and typos
3388 279027 Support for MVCL and CLCL instruction
3389 279027 s390x: Provide support for CLCL and MVCL instructions
3390 279062 Remove a redundant check in the insn selector for ppc.
3391 279071 JDK creates PTEST with redundant REX.W prefix
3392 279212 gdbsrv: add monitor cmd v.info scheduler.
3393 279378 exp-ptrcheck: the 'impossible' happened on mkfifo call
3394 279698 memcheck discards valid-bits for packuswb
3395 279795 memcheck reports uninitialised values for mincore on amd64
3396 279994 Add support for IBM Power ISA 2.06 -- stage 3
3397 280083 mempolicy syscall check errors
3398 280290 vex amd64->IR: 0x66 0xF 0x38 0x28 0xC1 0x66 0xF 0x6F
3399 280710 s390x: config files for nightly builds
3400 280757 /tmp dir still used by valgrind even if TMPDIR is specified
3401 280965 Valgrind breaks fcntl locks when program does mmap
3402 281138 WARNING: unhandled syscall: 340
3403 281241 == 275168 (valgrind useless on Macos 10.7.1 Lion)
3404 281304 == 275168 (Darwin: dyld "cannot load inserted library")
3405 281305 == 275168 (unhandled syscall: unix:357 on Darwin 11.1)
3406 281468 s390x: handle do_clone and gcc clones in call traces
3407 281488 ARM: VFP register corruption
3408 281828 == 275284 (false memmove warning: "Source and destination overlap")
3409 281883 s390x: Fix system call wrapper for "clone".
3410 282105 generalise 'reclaimSuperBlock' to also reclaim splittable superblock
3411 282112 Unhandled instruction bytes: 0xDE 0xD9 0x9B 0xDF (fcompp)
3412 282238 SLES10: make check fails
3413 282979 strcasestr needs replacement with recent(>=2.12) glibc
3414 283000 vex amd64->IR: 0x66 0xF 0x3A 0xA 0xC0 0x9 0xF3 0xF
3415 283243 Regression in ppc64 memcheck tests
3416 283325 == 267997 (Darwin: V segfaults on startup when built with Xcode 4.0)
3417 283427 re-connect epoll_pwait syscall on ARM linux
3418 283600 gdbsrv: android: port vgdb.c
3419 283709 none/tests/faultstatus needs to account for page size
3420 284305 filter_gdb needs enhancement to work on ppc64
3421 284384 clang 3.1 -Wunused-value warnings in valgrind.h, memcheck.h
3422 284472 Thumb2 ROR.W encoding T2 not implemented
3423 284621 XML-escape process command line in XML output
3424 n-i-bz cachegrind/callgrind: handle CPUID information for Core iX Intel CPUs
3425 that have non-power-of-2 sizes (also AMDs)
3426 n-i-bz don't be spooked by libraries mashed by elfhack
3427 n-i-bz don't be spooked by libxul.so linked with gold
3428 n-i-bz improved checking for VALGRIND_CHECK_MEM_IS_DEFINED
3430 (3.7.0-TEST1: 27 October 2011, vex r2228, valgrind r12245)
3431 (3.7.0.RC1: 1 November 2011, vex r2231, valgrind r12257)
3432 (3.7.0: 5 November 2011, vex r2231, valgrind r12258)
3436 Release 3.6.1 (16 February 2011)
3437 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3438 3.6.1 is a bug fix release. It adds support for some SSE4
3439 instructions that were omitted in 3.6.0 due to lack of time. Initial
3440 support for glibc-2.13 has been added. A number of bugs causing
3441 crashing or assertion failures have been fixed.
3443 The following bugs have been fixed or resolved. Note that "n-i-bz"
3444 stands for "not in bugzilla" -- that is, a bug that was reported to us
3445 but never got a bugzilla entry. We encourage you to file bugs in
3446 bugzilla (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than
3447 mailing the developers (or mailing lists) directly -- bugs that are
3448 not entered into bugzilla tend to get forgotten about or ignored.
3450 To see details of a given bug, visit
3451 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
3452 where XXXXXX is the bug number as listed below.
3454 188572 Valgrind on Mac should suppress setenv() mem leak
3455 194402 vex amd64->IR: 0x48 0xF 0xAE 0x4 (proper FX{SAVE,RSTOR} support)
3456 210481 vex amd64->IR: Assertion `sz == 2 || sz == 4' failed (REX.W POPQ)
3457 246152 callgrind internal error after pthread_cancel on 32 Bit Linux
3458 250038 ppc64: Altivec LVSR and LVSL instructions fail their regtest
3459 254420 memory pool tracking broken
3460 254957 Test code failing to compile due to changes in memcheck.h
3461 255009 helgrind/drd: crash on chmod with invalid parameter
3462 255130 readdwarf3.c parse_type_DIE confused by GNAT Ada types
3463 255355 helgrind/drd: crash on threaded programs doing fork
3465 255418 (SSE4.x) rint call compiled with ICC
3466 255822 --gen-suppressions can create invalid files: "too many callers [...]"
3467 255888 closing valgrindoutput tag outputted to log-stream on error
3468 255963 (SSE4.x) vex amd64->IR: 0x66 0xF 0x3A 0x9 0xDB 0x0 (ROUNDPD)
3469 255966 Slowness when using mempool annotations
3470 256387 vex x86->IR: 0xD4 0xA 0x2 0x7 (AAD and AAM)
3471 256600 super-optimized strcasecmp() false positive
3472 256669 vex amd64->IR: Unhandled LOOPNEL insn on amd64
3473 256968 (SSE4.x) vex amd64->IR: 0x66 0xF 0x38 0x10 0xD3 0x66 (BLENDVPx)
3474 257011 (SSE4.x) vex amd64->IR: 0x66 0xF 0x3A 0xE 0xFD 0xA0 (PBLENDW)
3475 257063 (SSE4.x) vex amd64->IR: 0x66 0xF 0x3A 0x8 0xC0 0x0 (ROUNDPS)
3476 257276 Missing case in memcheck --track-origins=yes
3477 258870 (SSE4.x) Add support for EXTRACTPS SSE 4.1 instruction
3478 261966 (SSE4.x) support for CRC32B and CRC32Q is lacking (also CRC32{W,L})
3479 262985 VEX regression in valgrind 3.6.0 in handling PowerPC VMX
3480 262995 (SSE4.x) crash when trying to valgrind gcc-snapshot (PCMPxSTRx $0)
3481 263099 callgrind_annotate counts Ir improperly [...]
3482 263877 undefined coprocessor instruction on ARMv7
3483 265964 configure FAIL with glibc-2.13
3484 n-i-bz Fix compile error w/ icc-12.x in guest_arm_toIR.c
3485 n-i-bz Docs: fix bogus descriptions for VALGRIND_CREATE_BLOCK et al
3486 n-i-bz Massif: don't assert on shmat() with --pages-as-heap=yes
3487 n-i-bz Bug fixes and major speedups for the exp-DHAT space profiler
3488 n-i-bz DRD: disable --free-is-write due to implementation difficulties
3490 (3.6.1: 16 February 2011, vex r2103, valgrind r11561).
3494 Release 3.6.0 (21 October 2010)
3495 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3496 3.6.0 is a feature release with many significant improvements and the
3497 usual collection of bug fixes.
3499 This release supports X86/Linux, AMD64/Linux, ARM/Linux, PPC32/Linux,
3500 PPC64/Linux, X86/Darwin and AMD64/Darwin. Support for recent distros
3501 and toolchain components (glibc 2.12, gcc 4.5, OSX 10.6) has been added.
3503 -------------------------
3505 Here are some highlights. Details are shown further down:
3507 * Support for ARM/Linux.
3509 * Support for recent Linux distros: Ubuntu 10.10 and Fedora 14.
3511 * Support for Mac OS X 10.6, both 32- and 64-bit executables.
3513 * Support for the SSE4.2 instruction set.
3515 * Enhancements to the Callgrind profiler, including the ability to
3516 handle CPUs with three levels of cache.
3518 * A new experimental heap profiler, DHAT.
3520 * A huge number of bug fixes and small enhancements.
3522 -------------------------
3524 Here are details of the above changes, together with descriptions of
3525 many other changes, and a list of fixed bugs.
3527 * ================== PLATFORM CHANGES =================
3529 * Support for ARM/Linux. Valgrind now runs on ARMv7 capable CPUs
3530 running Linux. It is known to work on Ubuntu 10.04, Ubuntu 10.10,
3531 and Maemo 5, so you can run Valgrind on your Nokia N900 if you want.
3533 This requires a CPU capable of running the ARMv7-A instruction set
3534 (Cortex A5, A8 and A9). Valgrind provides fairly complete coverage
3535 of the user space instruction set, including ARM and Thumb integer
3536 code, VFPv3, NEON and V6 media instructions. The Memcheck,
3537 Cachegrind and Massif tools work properly; other tools work to
3540 * Support for recent Linux distros (Ubuntu 10.10 and Fedora 14), along
3541 with support for recent releases of the underlying toolchain
3542 components, notably gcc-4.5 and glibc-2.12.
3544 * Support for Mac OS X 10.6, both 32- and 64-bit executables. 64-bit
3545 support also works much better on OS X 10.5, and is as solid as
3548 * Support for the SSE4.2 instruction set. SSE4.2 is supported in
3549 64-bit mode. In 32-bit mode, support is only available up to and
3550 including SSSE3. Some exceptions: SSE4.2 AES instructions are not
3551 supported in 64-bit mode, and 32-bit mode does in fact support the
3552 bare minimum SSE4 instructions to needed to run programs on Mac OS X
3553 10.6 on 32-bit targets.
3555 * Support for IBM POWER6 cpus has been improved. The Power ISA up to
3556 and including version 2.05 is supported.
3558 * ==================== TOOL CHANGES ====================
3560 * Cachegrind has a new processing script, cg_diff, which finds the
3561 difference between two profiles. It's very useful for evaluating
3562 the performance effects of a change in a program.
3564 Related to this change, the meaning of cg_annotate's (rarely-used)
3565 --threshold option has changed; this is unlikely to affect many
3566 people, if you do use it please see the user manual for details.
3568 * Callgrind now can do branch prediction simulation, similar to
3569 Cachegrind. In addition, it optionally can count the number of
3570 executed global bus events. Both can be used for a better
3571 approximation of a "Cycle Estimation" as derived event (you need to
3572 update the event formula in KCachegrind yourself).
3574 * Cachegrind and Callgrind now refer to the LL (last-level) cache
3575 rather than the L2 cache. This is to accommodate machines with
3576 three levels of caches -- if Cachegrind/Callgrind auto-detects the
3577 cache configuration of such a machine it will run the simulation as
3578 if the L2 cache isn't present. This means the results are less
3579 likely to match the true result for the machine, but
3580 Cachegrind/Callgrind's results are already only approximate, and
3581 should not be considered authoritative. The results are still
3582 useful for giving a general idea about a program's locality.
3584 * Massif has a new option, --pages-as-heap, which is disabled by
3585 default. When enabled, instead of tracking allocations at the level
3586 of heap blocks (as allocated with malloc/new/new[]), it instead
3587 tracks memory allocations at the level of memory pages (as mapped by
3588 mmap, brk, etc). Each mapped page is treated as its own block.
3589 Interpreting the page-level output is harder than the heap-level
3590 output, but this option is useful if you want to account for every
3591 byte of memory used by a program.
3593 * DRD has two new command-line options: --free-is-write and
3594 --trace-alloc. The former allows to detect reading from already freed
3595 memory, and the latter allows tracing of all memory allocations and
3598 * DRD has several new annotations. Custom barrier implementations can
3599 now be annotated, as well as benign races on static variables.
3601 * DRD's happens before / happens after annotations have been made more
3602 powerful, so that they can now also be used to annotate e.g. a smart
3603 pointer implementation.
3605 * Helgrind's annotation set has also been drastically improved, so as
3606 to provide to users a general set of annotations to describe locks,
3607 semaphores, barriers and condition variables. Annotations to
3608 describe thread-safe reference counted heap objects have also been
3611 * Memcheck has a new command-line option, --show-possibly-lost, which
3612 is enabled by default. When disabled, the leak detector will not
3613 show possibly-lost blocks.
3615 * A new experimental heap profiler, DHAT (Dynamic Heap Analysis Tool),
3616 has been added. DHAT keeps track of allocated heap blocks, and also
3617 inspects every memory reference to see which block (if any) is being
3618 accessed. This gives a lot of insight into block lifetimes,
3619 utilisation, turnover, liveness, and the location of hot and cold
3620 fields. You can use DHAT to do hot-field profiling.
3622 * ==================== OTHER CHANGES ====================
3624 * Improved support for unfriendly self-modifying code: the extra
3625 overhead incurred by --smc-check=all has been reduced by
3626 approximately a factor of 5 as compared with 3.5.0.
3628 * Ability to show directory names for source files in error messages.
3629 This is combined with a flexible mechanism for specifying which
3630 parts of the paths should be shown. This is enabled by the new flag
3633 * A new flag, --require-text-symbol, which will stop the run if a
3634 specified symbol is not found it a given shared object when it is
3635 loaded into the process. This makes advanced working with function
3636 intercepting and wrapping safer and more reliable.
3638 * Improved support for the Valkyrie GUI, version 2.0.0. GUI output
3639 and control of Valgrind is now available for the tools Memcheck and
3640 Helgrind. XML output from Valgrind is available for Memcheck,
3641 Helgrind and exp-Ptrcheck.
3643 * More reliable stack unwinding on amd64-linux, particularly in the
3644 presence of function wrappers, and with gcc-4.5 compiled code.
3646 * Modest scalability (performance improvements) for massive
3647 long-running applications, particularly for those with huge amounts
3650 * Support for analyzing programs running under Wine with has been
3651 improved. The header files <valgrind/valgrind.h>,
3652 <valgrind/memcheck.h> and <valgrind/drd.h> can now be used in
3653 Windows-programs compiled with MinGW or one of the Microsoft Visual
3656 * A rare but serious error in the 64-bit x86 CPU simulation was fixed.
3657 The 32-bit simulator was not affected. This did not occur often,
3658 but when it did would usually crash the program under test.
3661 * A large number of bugs were fixed. These are shown below.
3663 * A number of bugs were investigated, and were candidates for fixing,
3664 but are not fixed in 3.6.0, due to lack of developer time. They may
3665 get fixed in later releases. They are:
3667 194402 vex amd64->IR: 0x48 0xF 0xAE 0x4 0x24 0x49 (FXSAVE64)
3668 212419 false positive "lock order violated" (A+B vs A)
3669 213685 Undefined value propagates past dependency breaking instruction
3670 216837 Incorrect instrumentation of NSOperationQueue on Darwin
3671 237920 valgrind segfault on fork failure
3672 242137 support for code compiled by LLVM-2.8
3673 242423 Another unknown Intel cache config value
3674 243232 Inconsistent Lock Orderings report with trylock
3675 243483 ppc: callgrind triggers VEX assertion failure
3676 243935 Helgrind: implementation of ANNOTATE_HAPPENS_BEFORE() is wrong
3677 244677 Helgrind crash hg_main.c:616 (map_threads_lookup): Assertion
3679 246152 callgrind internal error after pthread_cancel on 32 Bit Linux
3680 249435 Analyzing wine programs with callgrind triggers a crash
3681 250038 ppc64: Altivec lvsr and lvsl instructions fail their regtest
3682 250065 Handling large allocations
3683 250101 huge "free" memory usage due to m_mallocfree.c
3684 "superblocks fragmentation"
3685 251569 vex amd64->IR: 0xF 0x1 0xF9 0x8B 0x4C 0x24 (RDTSCP)
3686 252091 Callgrind on ARM does not detect function returns correctly
3687 252600 [PATCH] Allow lhs to be a pointer for shl/shr
3688 254420 memory pool tracking broken
3689 n-i-bz support for adding symbols for JIT generated code
3692 The following bugs have been fixed or resolved. Note that "n-i-bz"
3693 stands for "not in bugzilla" -- that is, a bug that was reported to us
3694 but never got a bugzilla entry. We encourage you to file bugs in
3695 bugzilla (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than
3696 mailing the developers (or mailing lists) directly -- bugs that are
3697 not entered into bugzilla tend to get forgotten about or ignored.
3699 To see details of a given bug, visit
3700 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
3701 where XXXXXX is the bug number as listed below.
3703 135264 dcbzl instruction missing
3705 153699 Valgrind should report unaligned reads with movdqa
3707 190429 Valgrind reports lost of errors in ld.so
3708 with x86_64 2.9.90 glibc
3709 197266 valgrind appears to choke on the xmms instruction
3711 197988 Crash when demangling very large symbol names
3712 202315 unhandled syscall: 332 (inotify_init1)
3713 203256 Add page-level profiling to Massif
3714 205093 dsymutil=yes needs quotes, locking (partial fix)
3715 205241 Snow Leopard 10.6 support (partial fix)
3716 206600 Leak checker fails to upgrade indirect blocks when their
3717 parent becomes reachable
3718 210935 port valgrind.h (not valgrind) to win32 so apps run under
3719 wine can make client requests
3720 211410 vex amd64->IR: 0x15 0xFF 0xFF 0x0 0x0 0x89
3721 within Linux ip-stack checksum functions
3722 212335 unhandled instruction bytes: 0xF3 0xF 0xBD 0xC0
3724 213685 Undefined value propagates past dependency breaking instruction
3726 215914 Valgrind inserts bogus empty environment variable
3728 219538 adjtimex syscall wrapper wrong in readonly adjtime mode
3729 222545 shmat fails under valgind on some arm targets
3730 222560 ARM NEON support
3733 232509 Docs build fails with formatting inside <title></title> elements
3735 235642 [PATCH] syswrap-linux.c: support evdev EVIOCG* ioctls
3736 236546 vex x86->IR: 0x66 0xF 0x3A 0xA
3737 237202 vex amd64->IR: 0xF3 0xF 0xB8 0xC0 0x49 0x3B
3738 237371 better support for VALGRIND_MALLOCLIKE_BLOCK
3739 237485 symlink (syscall 57) is not supported on Mac OS
3740 237723 sysno == 101 exp-ptrcheck: the 'impossible' happened:
3742 238208 is_just_below_ESP doesn't take into account red-zone
3743 238345 valgrind passes wrong $0 when executing a shell script
3744 238679 mq_timedreceive syscall doesn't flag the reception buffer
3746 238696 fcntl command F_DUPFD_CLOEXEC not supported
3747 238713 unhandled instruction bytes: 0x66 0xF 0x29 0xC6
3748 238713 unhandled instruction bytes: 0x66 0xF 0x29 0xC6
3749 238745 3.5.0 Make fails on PPC Altivec opcodes, though configure
3751 239992 vex amd64->IR: 0x48 0xF 0xC4 0xC1 0x0 0x48
3757 242606 unhandled syscall: setegid (in Ptrcheck)
3758 242814 Helgrind "Impossible has happened" during
3759 QApplication::initInstance();
3760 243064 Valgrind attempting to read debug information from iso
3761 243270 Make stack unwinding in Valgrind wrappers more reliable
3762 243884 exp-ptrcheck: the 'impossible happened: unhandled syscall
3763 sysno = 277 (mq_open)
3764 244009 exp-ptrcheck unknown syscalls in analyzing lighttpd
3765 244493 ARM VFP d16-d31 registers support
3766 244670 add support for audit_session_self syscall on Mac OS 10.6
3767 244921 The xml report of helgrind tool is not well format
3768 244923 In the xml report file, the <preamble> not escape the
3769 xml char, eg '<','&','>'
3770 245535 print full path names in plain text reports
3771 245925 x86-64 red zone handling problem
3772 246258 Valgrind not catching integer underruns + new [] s
3773 246311 reg/reg cmpxchg doesn't work on amd64
3774 246549 unhandled syscall unix:277 while testing 32-bit Darwin app
3775 246888 Improve Makefile.vex.am
3776 247510 [OS X 10.6] Memcheck reports unaddressable bytes passed
3777 to [f]chmod_extended
3778 247526 IBM POWER6 (ISA 2.05) support is incomplete
3779 247561 Some leak testcases fails due to reachable addresses in
3781 247875 sizeofIRType to handle Ity_I128
3782 247894 [PATCH] unhandled syscall sys_readahead
3783 247980 Doesn't honor CFLAGS passed to configure
3784 248373 darwin10.supp is empty in the trunk
3785 248822 Linux FIBMAP ioctl has int parameter instead of long
3786 248893 [PATCH] make readdwarf.c big endianess safe to enable
3787 unwinding on big endian systems
3788 249224 Syscall 336 not supported (SYS_proc_info)
3790 249775 Incorrect scheme for detecting NEON capabilities of host CPU
3791 249943 jni JVM init fails when using valgrind
3792 249991 Valgrind incorrectly declares AESKEYGENASSIST support
3794 249996 linux/arm: unhandled syscall: 181 (__NR_pwrite64)
3795 250799 frexp$fenv_access_off function generates SIGILL
3796 250998 vex x86->IR: unhandled instruction bytes: 0x66 0x66 0x66 0x2E
3797 251251 support pclmulqdq insn
3798 251362 valgrind: ARM: attach to debugger either fails or provokes
3800 251674 Unhandled syscall 294
3803 254257 Add support for debugfiles found by build-id
3804 254550 [PATCH] Implement DW_ATE_UTF (DWARF4)
3805 254646 Wrapped functions cause stack misalignment on OS X
3806 (and possibly Linux)
3807 254556 ARM: valgrinding anything fails with SIGSEGV for 0xFFFF0FA0
3809 (3.6.0: 21 October 2010, vex r2068, valgrind r11471).
3813 Release 3.5.0 (19 August 2009)
3814 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
3815 3.5.0 is a feature release with many significant improvements and the
3816 usual collection of bug fixes. The main improvement is that Valgrind
3817 now works on Mac OS X.
3819 This release supports X86/Linux, AMD64/Linux, PPC32/Linux, PPC64/Linux
3820 and X86/Darwin. Support for recent distros and toolchain components
3821 (glibc 2.10, gcc 4.5) has been added.
3823 -------------------------
3825 Here is a short summary of the changes. Details are shown further
3828 * Support for Mac OS X (10.5.x).
3830 * Improvements and simplifications to Memcheck's leak checker.
3832 * Clarification and simplifications in various aspects of Valgrind's
3835 * XML output for Helgrind and Ptrcheck.
3837 * Performance and stability improvements for Helgrind and DRD.
3839 * Genuinely atomic support for x86/amd64/ppc atomic instructions.
3841 * A new experimental tool, BBV, useful for computer architecture
3844 * Improved Wine support, including ability to read Windows PDB
3847 -------------------------
3849 Here are details of the above changes, followed by descriptions of
3850 many other minor changes, and a list of fixed bugs.
3853 * Valgrind now runs on Mac OS X. (Note that Mac OS X is sometimes
3854 called "Darwin" because that is the name of the OS core, which is the
3855 level that Valgrind works at.)
3859 - It requires OS 10.5.x (Leopard). Porting to 10.4.x is not planned
3860 because it would require work and 10.4 is only becoming less common.
3862 - 32-bit programs on x86 and AMD64 (a.k.a x86-64) machines are supported
3863 fairly well. For 10.5.x, 32-bit programs are the default even on
3864 64-bit machines, so it handles most current programs.
3866 - 64-bit programs on x86 and AMD64 (a.k.a x86-64) machines are not
3867 officially supported, but simple programs at least will probably work.
3868 However, start-up is slow.
3870 - PowerPC machines are not supported.
3872 Things that don't work:
3874 - The Ptrcheck tool.
3876 - Objective-C garbage collection.
3880 - If you have Rogue Amoeba's "Instant Hijack" program installed,
3881 Valgrind will fail with a SIGTRAP at start-up. See
3882 https://bugs.kde.org/show_bug.cgi?id=193917 for details and a
3887 - You will likely find --dsymutil=yes a useful option, as error
3888 messages may be imprecise without it.
3890 - Mac OS X support is new and therefore will be less robust than the
3891 Linux support. Please report any bugs you find.
3893 - Threaded programs may run more slowly than on Linux.
3895 Many thanks to Greg Parker for developing this port over several years.
3898 * Memcheck's leak checker has been improved.
3900 - The results for --leak-check=summary now match the summary results
3901 for --leak-check=full. Previously they could differ because
3902 --leak-check=summary counted "indirectly lost" blocks and
3903 "suppressed" blocks as "definitely lost".
3905 - Blocks that are only reachable via at least one interior-pointer,
3906 but are directly pointed to by a start-pointer, were previously
3907 marked as "still reachable". They are now correctly marked as
3910 - The default value for the --leak-resolution option has been
3911 changed from "low" to "high". In general, this means that more
3912 leak reports will be produced, but each leak report will describe
3913 fewer leaked blocks.
3915 - With --leak-check=full, "definitely lost" and "possibly lost"
3916 leaks are now considered as proper errors, ie. they are counted
3917 for the "ERROR SUMMARY" and affect the behaviour of
3918 --error-exitcode. These leaks are not counted as errors if
3919 --leak-check=summary is specified, however.
3921 - Documentation for the leak checker has been improved.
3924 * Various aspects of Valgrind's text output have changed.
3926 - Valgrind's start-up message has changed. It is shorter but also
3927 includes the command being run, which makes it easier to use
3928 --trace-children=yes. An example:
3930 - Valgrind's shut-down messages have also changed. This is most
3931 noticeable with Memcheck, where the leak summary now occurs before
3932 the error summary. This change was necessary to allow leaks to be
3933 counted as proper errors (see the description of the leak checker
3934 changes above for more details). This was also necessary to fix a
3935 longstanding bug in which uses of suppressions against leaks were
3936 not "counted", leading to difficulties in maintaining suppression
3937 files (see https://bugs.kde.org/show_bug.cgi?id=186790).
3939 - Behavior of -v has changed. In previous versions, -v printed out
3940 a mixture of marginally-user-useful information, and tool/core
3941 statistics. The statistics printing has now been moved to its own
3942 flag, --stats=yes. This means -v is less verbose and more likely
3943 to convey useful end-user information.
3945 - The format of some (non-XML) stack trace entries has changed a
3946 little. Previously there were six possible forms:
3948 0x80483BF: really (a.c:20)
3949 0x80483BF: really (in /foo/a.out)
3951 0x80483BF: (within /foo/a.out)
3952 0x80483BF: ??? (a.c:20)
3955 The third and fourth of these forms have been made more consistent
3956 with the others. The six possible forms are now:
3958 0x80483BF: really (a.c:20)
3959 0x80483BF: really (in /foo/a.out)
3960 0x80483BF: really (in ???)
3961 0x80483BF: ??? (in /foo/a.out)
3962 0x80483BF: ??? (a.c:20)
3965 Stack traces produced when --xml=yes is specified are different
3969 * Helgrind and Ptrcheck now support XML output, so they can be used
3970 from GUI tools. Also, the XML output mechanism has been
3973 - The XML format has been overhauled and generalised, so it is more
3974 suitable for error reporting tools in general. The Memcheck
3975 specific aspects of it have been removed. The new format, which
3976 is an evolution of the old format, is described in
3977 docs/internals/xml-output-protocol4.txt.
3979 - Memcheck has been updated to use the new format.
3981 - Helgrind and Ptrcheck are now able to emit output in this format.
3983 - The XML output mechanism has been overhauled. XML is now output
3984 to its own file descriptor, which means that:
3986 * Valgrind can output text and XML independently.
3988 * The longstanding problem of XML output being corrupted by
3989 unexpected un-tagged text messages is solved.
3991 As before, the destination for text output is specified using
3992 --log-file=, --log-fd= or --log-socket=.
3994 As before, XML output for a tool is enabled using --xml=yes.
3996 Because there's a new XML output channel, the XML output
3997 destination is now specified by --xml-file=, --xml-fd= or
4000 Initial feedback has shown this causes some confusion. To
4001 clarify, the two envisaged usage scenarios are:
4003 (1) Normal text output. In this case, do not specify --xml=yes
4004 nor any of --xml-file=, --xml-fd= or --xml-socket=.
4006 (2) XML output. In this case, specify --xml=yes, and one of
4007 --xml-file=, --xml-fd= or --xml-socket= to select the XML
4008 destination, one of --log-file=, --log-fd= or --log-socket=
4009 to select the destination for any remaining text messages,
4010 and, importantly, -q.
4012 -q makes Valgrind completely silent on the text channel,
4013 except in the case of critical failures, such as Valgrind
4014 itself segfaulting, or failing to read debugging information.
4015 Hence, in this scenario, it suffices to check whether or not
4016 any output appeared on the text channel. If yes, then it is
4017 likely to be a critical error which should be brought to the
4018 attention of the user. If no (the text channel produced no
4019 output) then it can be assumed that the run was successful.
4021 This allows GUIs to make the critical distinction they need to
4022 make (did the run fail or not?) without having to search or
4023 filter the text output channel in any way.
4025 It is also recommended to use --child-silent-after-fork=yes in
4029 * Improvements and changes in Helgrind:
4031 - XML output, as described above
4033 - Checks for consistent association between pthread condition
4034 variables and their associated mutexes are now performed.
4036 - pthread_spinlock functions are supported.
4038 - Modest performance improvements.
4040 - Initial (skeletal) support for describing the behaviour of
4041 non-POSIX synchronisation objects through ThreadSanitizer
4042 compatible ANNOTATE_* macros.
4044 - More controllable tradeoffs between performance and the level of
4045 detail of "previous" accesses in a race. There are now three
4048 * --history-level=full. This is the default, and was also the
4049 default in 3.4.x. It shows both stacks involved in a race, but
4050 requires a lot of memory and can be very slow in programs that
4051 do many inter-thread synchronisation events.
4053 * --history-level=none. This only shows the later stack involved
4054 in a race. This can be much faster than --history-level=full,
4055 but makes it much more difficult to find the other access
4056 involved in the race.
4058 The new intermediate setting is
4060 * --history-level=approx
4062 For the earlier (other) access, two stacks are presented. The
4063 earlier access is guaranteed to be somewhere in between the two
4064 program points denoted by those stacks. This is not as useful
4065 as showing the exact stack for the previous access (as per
4066 --history-level=full), but it is better than nothing, and it's
4067 almost as fast as --history-level=none.
4070 * New features and improvements in DRD:
4072 - The error messages printed by DRD are now easier to interpret.
4073 Instead of using two different numbers to identify each thread
4074 (Valgrind thread ID and DRD thread ID), DRD does now identify
4075 threads via a single number (the DRD thread ID). Furthermore
4076 "first observed at" information is now printed for all error
4077 messages related to synchronization objects.
4079 - Added support for named semaphores (sem_open() and sem_close()).
4081 - Race conditions between pthread_barrier_wait() and
4082 pthread_barrier_destroy() calls are now reported.
4084 - Added support for custom allocators through the macros
4085 VALGRIND_MALLOCLIKE_BLOCK() VALGRIND_FREELIKE_BLOCK() (defined in
4086 in <valgrind/valgrind.h>). An alternative for these two macros is
4087 the new client request VG_USERREQ__DRD_CLEAN_MEMORY (defined in
4090 - Added support for annotating non-POSIX synchronization objects
4091 through several new ANNOTATE_*() macros.
4093 - OpenMP: added support for the OpenMP runtime (libgomp) included
4094 with gcc versions 4.3.0 and 4.4.0.
4098 - Added two new command-line options (--first-race-only and
4099 --segment-merging-interval).
4102 * Genuinely atomic support for x86/amd64/ppc atomic instructions
4104 Valgrind will now preserve (memory-access) atomicity of LOCK-
4105 prefixed x86/amd64 instructions, and any others implying a global
4106 bus lock. Ditto for PowerPC l{w,d}arx/st{w,d}cx. instructions.
4108 This means that Valgrinded processes will "play nicely" in
4109 situations where communication with other processes, or the kernel,
4110 is done through shared memory and coordinated with such atomic
4111 instructions. Prior to this change, such arrangements usually
4112 resulted in hangs, races or other synchronisation failures, because
4113 Valgrind did not honour atomicity of such instructions.
4116 * A new experimental tool, BBV, has been added. BBV generates basic
4117 block vectors for use with the SimPoint analysis tool, which allows
4118 a program's overall behaviour to be approximated by running only a
4119 fraction of it. This is useful for computer architecture
4120 researchers. You can run BBV by specifying --tool=exp-bbv (the
4121 "exp-" prefix is short for "experimental"). BBV was written by
4125 * Modestly improved support for running Windows applications under
4126 Wine. In particular, initial support for reading Windows .PDB debug
4127 information has been added.
4130 * A new Memcheck client request VALGRIND_COUNT_LEAK_BLOCKS has been
4131 added. It is similar to VALGRIND_COUNT_LEAKS but counts blocks
4135 * The Valgrind client requests VALGRIND_PRINTF and
4136 VALGRIND_PRINTF_BACKTRACE have been changed slightly. Previously,
4137 the string was always printed immediately on its own line. Now, the
4138 string will be added to a buffer but not printed until a newline is
4139 encountered, or other Valgrind output is printed (note that for
4140 VALGRIND_PRINTF_BACKTRACE, the back-trace itself is considered
4141 "other Valgrind output"). This allows you to use multiple
4142 VALGRIND_PRINTF calls to build up a single output line, and also to
4143 print multiple output lines with a single request (by embedding
4144 multiple newlines in the string).
4147 * The graphs drawn by Massif's ms_print program have changed slightly:
4149 - The half-height chars '.' and ',' are no longer drawn, because
4150 they are confusing. The --y option can be used if the default
4151 y-resolution is not high enough.
4153 - Horizontal lines are now drawn after the top of a snapshot if
4154 there is a gap until the next snapshot. This makes it clear that
4155 the memory usage has not dropped to zero between snapshots.
4158 * Something that happened in 3.4.0, but wasn't clearly announced: the
4159 option --read-var-info=yes can be used by some tools (Memcheck,
4160 Helgrind and DRD). When enabled, it causes Valgrind to read DWARF3
4161 variable type and location information. This makes those tools
4162 start up more slowly and increases memory consumption, but
4163 descriptions of data addresses in error messages become more
4167 * exp-Omega, an experimental instantaneous leak-detecting tool, was
4168 disabled in 3.4.0 due to a lack of interest and maintenance,
4169 although the source code was still in the distribution. The source
4170 code has now been removed from the distribution. For anyone
4171 interested, the removal occurred in SVN revision r10247.
4174 * Some changes have been made to the build system.
4176 - VEX/ is now integrated properly into the build system. This means
4177 that dependency tracking within VEX/ now works properly, "make
4178 install" will work without requiring "make" before it, and
4179 parallel builds (ie. 'make -j') now work (previously a
4180 .NOTPARALLEL directive was used to serialize builds, ie. 'make -j'
4181 was effectively ignored).
4183 - The --with-vex configure option has been removed. It was of
4184 little use and removing it simplified the build system.
4186 - The location of some install files has changed. This should not
4187 affect most users. Those who might be affected:
4189 * For people who use Valgrind with MPI programs, the installed
4190 libmpiwrap.so library has moved from
4191 $(INSTALL)/<platform>/libmpiwrap.so to
4192 $(INSTALL)/libmpiwrap-<platform>.so.
4194 * For people who distribute standalone Valgrind tools, the
4195 installed libraries such as $(INSTALL)/<platform>/libcoregrind.a
4196 have moved to $(INSTALL)/libcoregrind-<platform>.a.
4198 These changes simplify the build system.
4200 - Previously, all the distributed suppression (*.supp) files were
4201 installed. Now, only default.supp is installed. This should not
4202 affect users as the other installed suppression files were not
4203 read; the fact that they were installed was a mistake.
4206 * KNOWN LIMITATIONS:
4208 - Memcheck is unusable with the Intel compiler suite version 11.1,
4209 when it generates code for SSE2-and-above capable targets. This
4210 is because of icc's use of highly optimised inlined strlen
4211 implementations. It causes Memcheck to report huge numbers of
4212 false errors even in simple programs. Helgrind and DRD may also
4215 Versions 11.0 and earlier may be OK, but this has not been
4219 The following bugs have been fixed or resolved. Note that "n-i-bz"
4220 stands for "not in bugzilla" -- that is, a bug that was reported to us
4221 but never got a bugzilla entry. We encourage you to file bugs in
4222 bugzilla (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than
4223 mailing the developers (or mailing lists) directly -- bugs that are
4224 not entered into bugzilla tend to get forgotten about or ignored.
4226 To see details of a given bug, visit
4227 https://bugs.kde.org/show_bug.cgi?id=XXXXXX
4228 where XXXXXX is the bug number as listed below.
4230 84303 How about a LockCheck tool?
4231 91633 dereference of null ptr in vgPlain_st_basetype
4232 97452 Valgrind doesn't report any pthreads problems
4233 100628 leak-check gets assertion failure when using
4234 VALGRIND_MALLOCLIKE_BLOCK on malloc()ed memory
4235 108528 NPTL pthread cleanup handlers not called
4236 110126 Valgrind 2.4.1 configure.in tramples CFLAGS
4237 110128 mallinfo is not implemented...
4238 110770 VEX: Generated files not always updated when making valgrind
4239 111102 Memcheck: problems with large (memory footprint) applications
4240 115673 Vex's decoder should never assert
4241 117564 False positive: Syscall param clone(child_tidptr) contains
4242 uninitialised byte(s)
4243 119404 executing ssh from inside valgrind fails
4244 133679 Callgrind does not write path names to sources with dwarf debug
4246 135847 configure.in problem with non gnu compilers (and possible fix)
4247 136154 threads.c:273 (vgCallgrind_post_signal): Assertion
4248 '*(vgCallgrind_current_fn_stack.top) == 0' failed.
4249 136230 memcheck reports "possibly lost", should be "still reachable"
4250 137073 NULL arg to MALLOCLIKE_BLOCK causes crash
4251 137904 Valgrind reports a memory leak when using POSIX threads,
4253 139076 valgrind VT_GETSTATE error
4254 142228 complaint of elf_dynamic_do_rela in trivial usage
4255 145347 spurious warning with USBDEVFS_REAPURB
4256 148441 (wine) can't find memory leak in Wine, win32 binary
4258 148742 Leak-check fails assert on exit
4259 149878 add (proper) check for calloc integer overflow
4260 150606 Call graph is broken when using callgrind control
4261 152393 leak errors produce an exit code of 0. I need some way to
4262 cause leak errors to result in a nonzero exit code.
4263 157154 documentation (leak-resolution doc speaks about num-callers
4264 def=4) + what is a loss record
4265 159501 incorrect handling of ALSA ioctls
4266 162020 Valgrinding an empty/zero-byte file crashes valgrind
4267 162482 ppc: Valgrind crashes while reading stabs information
4268 162718 x86: avoid segment selector 0 in sys_set_thread_area()
4269 163253 (wine) canonicaliseSymtab forgot some fields in DiSym
4270 163560 VEX/test_main.c is missing from valgrind-3.3.1
4271 164353 malloc_usable_size() doesn't return a usable size
4272 165468 Inconsistent formatting in memcheck manual -- please fix
4273 169505 main.c:286 (endOfInstr):
4274 Assertion 'ii->cost_offset == *cost_offset' failed
4275 177206 Generate default.supp during compile instead of configure
4276 177209 Configure valt_load_address based on arch+os
4277 177305 eventfd / syscall 323 patch lost
4278 179731 Tests fail to build because of inlining of non-local asm labels
4279 181394 helgrind: libhb_core.c:3762 (msm_write): Assertion
4280 'ordxx == POrd_EQ || ordxx == POrd_LT' failed.
4281 181594 Bogus warning for empty text segment
4282 181707 dwarf doesn't require enumerations to have name
4283 185038 exp-ptrcheck: "unhandled syscall: 285" (fallocate) on x86_64
4284 185050 exp-ptrcheck: sg_main.c:727 (add_block_to_GlobalTree):
4285 Assertion '!already_present' failed.
4286 185359 exp-ptrcheck: unhandled syscall getresuid()
4287 185794 "WARNING: unhandled syscall: 285" (fallocate) on x86_64
4288 185816 Valgrind is unable to handle debug info for files with split
4289 debug info that are prelinked afterwards
4290 185980 [darwin] unhandled syscall: sem_open
4291 186238 bbToIR_AMD64: disInstr miscalculated next %rip
4292 186507 exp-ptrcheck unhandled syscalls prctl, etc.
4293 186790 Suppression pattern used for leaks are not reported
4294 186796 Symbols with length>200 in suppression files are ignored
4295 187048 drd: mutex PTHREAD_PROCESS_SHARED attribute missinterpretation
4296 187416 exp-ptrcheck: support for __NR_{setregid,setreuid,setresuid}
4297 188038 helgrind: hg_main.c:926: mk_SHVAL_fail: the 'impossible' happened
4298 188046 bashisms in the configure script
4299 188127 amd64->IR: unhandled instruction bytes: 0xF0 0xF 0xB0 0xA
4300 188161 memcheck: --track-origins=yes asserts "mc_machine.c:672
4301 (get_otrack_shadow_offset_wrk): the 'impossible' happened."
4302 188248 helgrind: pthread_cleanup_push, pthread_rwlock_unlock,
4303 assertion fail "!lock->heldBy"
4304 188427 Add support for epoll_create1 (with patch)
4305 188530 Support for SIOCGSTAMPNS
4306 188560 Include valgrind.spec in the tarball
4307 188572 Valgrind on Mac should suppress setenv() mem leak
4308 189054 Valgrind fails to build because of duplicate non-local asm labels
4309 189737 vex amd64->IR: unhandled instruction bytes: 0xAC
4310 189762 epoll_create syscall not handled (--tool=exp-ptrcheck)
4311 189763 drd assertion failure: s_threadinfo[tid].is_recording
4312 190219 unhandled syscall: 328 (x86-linux)
4313 190391 dup of 181394; see above
4314 190429 Valgrind reports lots of errors in ld.so with x86_64 2.9.90 glibc
4315 190820 No debug information on powerpc-linux
4316 191095 PATCH: Improve usbdevfs ioctl handling
4317 191182 memcheck: VALGRIND_LEAK_CHECK quadratic when big nr of chunks
4319 191189 --xml=yes should obey --gen-suppressions=all
4320 191192 syslog() needs a suppression on macosx
4321 191271 DARWIN: WARNING: unhandled syscall: 33554697 a.k.a.: 265
4322 191761 getrlimit on MacOSX
4323 191992 multiple --fn-skip only works sometimes; dependent on order
4324 192634 V. reports "aspacem sync_check_mapping_callback:
4325 segment mismatch" on Darwin
4326 192954 __extension__ missing on 2 client requests
4327 194429 Crash at start-up with glibc-2.10.1 and linux-2.6.29
4328 194474 "INSTALL" file has different build instructions than "README"
4329 194671 Unhandled syscall (sem_wait?) from mac valgrind
4330 195069 memcheck: reports leak (memory still reachable) for
4332 195169 drd: (vgDrd_barrier_post_wait):
4333 Assertion 'r->sg[p->post_iteration]' failed.
4334 195268 valgrind --log-file doesn't accept ~/...
4335 195838 VEX abort: LibVEX_N_SPILL_BYTES too small for CPUID boilerplate
4336 195860 WARNING: unhandled syscall: unix:223
4337 196528 need a error suppression for pthread_rwlock_init under os x?
4338 197227 Support aio_* syscalls on Darwin
4339 197456 valgrind should reject --suppressions=(directory)
4340 197512 DWARF2 CFI reader: unhandled CFI instruction 0:10
4341 197591 unhandled syscall 27 (mincore)
4342 197793 Merge DCAS branch to the trunk == 85756, 142103
4343 197794 Avoid duplicate filenames in Vex
4344 197898 make check fails on current SVN
4345 197901 make check fails also under exp-ptrcheck in current SVN
4346 197929 Make --leak-resolution=high the default
4347 197930 Reduce spacing between leak reports
4348 197933 Print command line of client at start-up, and shorten preamble
4349 197966 unhandled syscall 205 (x86-linux, --tool=exp-ptrcheck)
4350 198395 add BBV to the distribution as an experimental tool
4351 198624 Missing syscalls on Darwin: 82, 167, 281, 347
4352 198649 callgrind_annotate doesn't cumulate counters
4353 199338 callgrind_annotate sorting/thresholds are broken for all but Ir
4354 199977 Valgrind complains about an unrecognized instruction in the
4355 atomic_incs test program
4356 200029 valgrind isn't able to read Fedora 12 debuginfo
4357 200760 darwin unhandled syscall: unix:284
4358 200827 DRD doesn't work on Mac OS X
4359 200990 VG_(read_millisecond_timer)() does not work correctly
4360 201016 Valgrind does not support pthread_kill() on Mac OS
4361 201169 Document --read-var-info
4362 201323 Pre-3.5.0 performance sanity checking
4363 201384 Review user manual for the 3.5.0 release
4364 201585 mfpvr not implemented on ppc
4365 201708 tests failing because x86 direction flag is left set
4366 201757 Valgrind doesn't handle any recent sys_futex additions
4367 204377 64-bit valgrind can not start a shell script
4368 (with #!/path/to/shell) if the shell is a 32-bit executable
4369 n-i-bz drd: fixed assertion failure triggered by mutex reinitialization.
4370 n-i-bz drd: fixed a bug that caused incorrect messages to be printed
4371 about memory allocation events with memory access tracing enabled
4372 n-i-bz drd: fixed a memory leak triggered by vector clock deallocation
4374 (3.5.0: 19 Aug 2009, vex r1913, valgrind r10846).
4378 Release 3.4.1 (28 February 2009)
4379 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4380 3.4.1 is a bug-fix release that fixes some regressions and assertion
4381 failures in debug info reading in 3.4.0, most notably incorrect stack
4382 traces on amd64-linux on older (glibc-2.3 based) systems. Various
4383 other debug info problems are also fixed. A number of bugs in the
4384 exp-ptrcheck tool introduced in 3.4.0 have been fixed.
4386 In view of the fact that 3.4.0 contains user-visible regressions
4387 relative to 3.3.x, upgrading to 3.4.1 is recommended. Packagers are
4388 encouraged to ship 3.4.1 in preference to 3.4.0.
4390 The fixed bugs are as follows. Note that "n-i-bz" stands for "not in
4391 bugzilla" -- that is, a bug that was reported to us but never got a
4392 bugzilla entry. We encourage you to file bugs in bugzilla
4393 (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than mailing the
4394 developers (or mailing lists) directly -- bugs that are not entered
4395 into bugzilla tend to get forgotten about or ignored.
4397 n-i-bz Fix various bugs reading icc-11 generated debug info
4398 n-i-bz Fix various bugs reading gcc-4.4 generated debug info
4399 n-i-bz Preliminary support for glibc-2.10 / Fedora 11
4400 n-i-bz Cachegrind and Callgrind: handle non-power-of-two cache sizes,
4401 so as to support (eg) 24k Atom D1 and Core2 with 3/6/12MB L2.
4402 179618 exp-ptrcheck crashed / exit prematurely
4403 179624 helgrind: false positive races with pthread_create and
4404 recv/open/close/read
4405 134207 pkg-config output contains @VG_PLATFORM@
4406 176926 floating point exception at valgrind startup with PPC 440EPX
4407 181594 Bogus warning for empty text segment
4408 173751 amd64->IR: 0x48 0xF 0x6F 0x45 (even more redundant rex prefixes)
4409 181707 Dwarf3 doesn't require enumerations to have name
4410 185038 exp-ptrcheck: "unhandled syscall: 285" (fallocate) on x86_64
4411 185050 exp-ptrcheck: sg_main.c:727 (add_block_to_GlobalTree):
4412 Assertion '!already_present' failed.
4413 185359 exp-ptrcheck unhandled syscall getresuid()
4415 (3.4.1.RC1: 24 Feb 2008, vex r1884, valgrind r9253).
4416 (3.4.1: 28 Feb 2008, vex r1884, valgrind r9293).
4420 Release 3.4.0 (2 January 2009)
4421 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
4422 3.4.0 is a feature release with many significant improvements and the
4423 usual collection of bug fixes. This release supports X86/Linux,
4424 AMD64/Linux, PPC32/Linux and PPC64/Linux. Support for recent distros
4425 (using gcc 4.4, glibc 2.8 and 2.9) has been added.
4427 3.4.0 brings some significant tool improvements. Memcheck can now
4428 report the origin of uninitialised values, the thread checkers
4429 Helgrind and DRD are much improved, and we have a new experimental
4430 tool, exp-Ptrcheck, which is able to detect overruns of stack and
4431 global arrays. In detail:
4433 * Memcheck is now able to track the origin of uninitialised values.
4434 When it reports an uninitialised value error, it will try to show
4435 the origin of the value, as either a heap or stack allocation.
4436 Origin tracking is expensive and so is not enabled by default. To
4437 use it, specify --track-origins=yes. Memcheck's speed will be
4438 essentially halved, and memory usage will be significantly
4439 increased. Nevertheless it can drastically reduce the effort
4440 required to identify the root cause of uninitialised value errors,
4441 and so is often a programmer productivity win, despite running more
4444 * A version (1.4.0) of the Valkyrie GUI, that works with Memcheck in
4445 3.4.0, will be released shortly.
4447 * Helgrind's race detection algorithm has been completely redesigned
4448 and reimplemented, to address usability and scalability concerns:
4450 - The new algorithm has a lower false-error rate: it is much less
4451 likely to report races that do not really exist.
4453 - Helgrind will display full call stacks for both accesses involved
4454 in a race. This makes it easier to identify the root causes of
4457 - Limitations on the size of program that can run have been removed.
4459 - Performance has been modestly improved, although that is very
4462 - Direct support for Qt4 threading has been added.
4464 - pthread_barriers are now directly supported.
4466 - Helgrind works well on all supported Linux targets.
4468 * The DRD thread debugging tool has seen major improvements:
4470 - Greatly improved performance and significantly reduced memory
4473 - Support for several major threading libraries (Boost.Thread, Qt4,
4474 glib, OpenMP) has been added.
4476 - Support for atomic instructions, POSIX semaphores, barriers and
4477 reader-writer locks has been added.
4479 - Works now on PowerPC CPUs too.
4481 - Added support for printing thread stack usage at thread exit time.
4483 - Added support for debugging lock contention.
4485 - Added a manual for Drd.
4487 * A new experimental tool, exp-Ptrcheck, has been added. Ptrcheck
4488 checks for misuses of pointers. In that sense it is a bit like
4489 Memcheck. However, Ptrcheck can do things Memcheck can't: it can
4490 detect overruns of stack and global arrays, it can detect
4491 arbitrarily far out-of-bounds accesses to heap blocks, and it can
4492 detect accesses heap blocks that have been freed a very long time
4493 ago (millions of blocks in the past).
4495 Ptrcheck currently works only on x86-linux and amd64-linux. To use
4496 it, use --tool=exp-ptrcheck. A simple manual is provided, as part
4497 of the main Valgrind documentation. As this is an experimental
4498 tool, we would be particularly interested in hearing about your
4499 experiences with it.
4501 * exp-Omega, an experimental instantaneous leak-detecting tool, is no
4502 longer built by default, although the code remains in the repository
4503 and the tarball. This is due to three factors: a perceived lack of
4504 users, a lack of maintenance, and concerns that it may not be
4505 possible to achieve reliable operation using the existing design.
4507 * As usual, support for the latest Linux distros and toolchain
4508 components has been added. It should work well on Fedora Core 10,
4509 OpenSUSE 11.1 and Ubuntu 8.10. gcc-4.4 (in its current pre-release
4510 state) is supported, as is glibc-2.9. The C++ demangler has been
4511 updated so as to work well with C++ compiled by even the most recent
4514 * You can now use frame-level wildcards in suppressions. This was a
4515 frequently-requested enhancement. A line "..." in a suppression now
4516 matches zero or more frames. This makes it easier to write
4517 suppressions which are precise yet insensitive to changes in
4520 * 3.4.0 adds support on x86/amd64 for the SSSE3 instruction set.
4522 * Very basic support for IBM Power6 has been added (64-bit processes only).
4524 * Valgrind is now cross-compilable. For example, it is possible to
4525 cross compile Valgrind on an x86/amd64-linux host, so that it runs
4526 on a ppc32/64-linux target.
4528 * You can set the main thread's stack size at startup using the
4529 new --main-stacksize= flag (subject of course to ulimit settings).
4530 This is useful for running apps that need a lot of stack space.
4532 * The limitation that you can't use --trace-children=yes together
4533 with --db-attach=yes has been removed.
4535 * The following bugs have been fixed. Note that "n-i-bz" stands for
4536 "not in bugzilla" -- that is, a bug that was reported to us but
4537 never got a bugzilla entry. We encourage you to file bugs in
4538 bugzilla (http://bugs.kde.org/enter_valgrind_bug.cgi) rather than
4539 mailing the developers (or mailing lists) directly.
4541 n-i-bz Make return types for some client requests 64-bit clean
4542 n-i-bz glibc 2.9 support
4543 n-i-bz ignore unsafe .valgrindrc's (CVE-2008-4865)
4544 n-i-bz MPI_Init(0,0) is valid but libmpiwrap.c segfaults
4545 n-i-bz Building in an env without gdb gives bogus gdb attach
4546 92456 Tracing the origin of uninitialised memory
4547 106497 Valgrind does not demangle some C++ template symbols
4549 151612 Suppression with "..." (frame-level wildcards in .supp files)
4550 156404 Unable to start oocalc under memcheck on openSUSE 10.3 (64-bit)
4551 159285 unhandled syscall:25 (stime, on x86-linux)
4552 159452 unhandled ioctl 0x8B01 on "valgrind iwconfig"
4553 160954 ppc build of valgrind crashes with illegal instruction (isel)
4554 160956 mallinfo implementation, w/ patch
4555 162092 Valgrind fails to start gnome-system-monitor
4556 162819 malloc_free_fill test doesn't pass on glibc2.8 x86
4557 163794 assertion failure with "--track-origins=yes"
4558 163933 sigcontext.err and .trapno must be set together
4559 163955 remove constraint !(--db-attach=yes && --trace-children=yes)
4560 164476 Missing kernel module loading system calls
4561 164669 SVN regression: mmap() drops posix file locks
4562 166581 Callgrind output corruption when program forks
4563 167288 Patch file for missing system calls on Cell BE
4564 168943 unsupported scas instruction pentium
4565 171645 Unrecognised instruction (MOVSD, non-binutils encoding)
4566 172417 x86->IR: 0x82 ...
4567 172563 amd64->IR: 0xD9 0xF5 - fprem1
4568 173099 .lds linker script generation error
4569 173177 [x86_64] syscalls: 125/126/179 (capget/capset/quotactl)
4570 173751 amd64->IR: 0x48 0xF 0x6F 0x45 (even more redundant prefixes)
4572 174908 --log-file value not expanded correctly for core file
4573 175044 Add lookup_dcookie for amd64
4574 175150 x86->IR: 0xF2 0xF 0x11 0xC1 (movss non-binutils encoding)
4576 Developer-visible changes:
4578 * Valgrind's debug-info reading machinery has been majorly overhauled.
4579 It can now correctly establish the addresses for ELF data symbols,
4580 which is something that has never worked properly before now.
4582 Also, Valgrind can now read DWARF3 type and location information for
4583 stack and global variables. This makes it possible to use the
4584 framework to build tools that rely on knowing the type and locations
4585 of stack and global variables, for example exp-Ptrcheck.
4587 Reading of such information is disabled by default, because most
4588 tools don't need it, and because it is expensive in space and time.
4589 However, you can force Valgrind to read it, using the
4590 --read-var-info=yes flag. Memcheck, Helgrind and DRD are able to
4591 make use of such information, if present, to provide source-level
4592 descriptions of data addresses in the error messages they create.
4594 (3.4.0.RC1: 24 Dec 2008, vex r1878, valgrind r8882).
4595 (3.4.0: 3 Jan 2009, vex r1878, valgrind r8899).