C ++ glibc双重自由错误

时间:2016-04-18 20:01:06

标签: c++ glibc double-free

我得到了这个奇怪的错误,我无法弄明白。我正在学习考试,所以我使用结构而不是课程,因为这是我们在课堂上所做的。这是我的代码

#include <iostream>
#include <string>
using namespace std;


struct Course;
ostream &operator<<(ostream &os, Course c);


struct Course {
        string name;
        Course(string n) {
                name = n;
        }
        Course(const Course &c) {
                cout << "Copying course" << endl;
                name = c.name;
        }
        Course &operator=(const Course &c) {
                cout << "Assigning course" << endl;
                name = c.name;
                return *this;
        }
};


struct Student {
        int id;
        Course *courses[5];
        int size;
        Student(int num) {
                id = num;
                for (int i = 0; i < 5; i++) {
                        courses[i] = new Course("Course");
                }
                size = 0;
        }
        Student(const Student &s) {
                cout << "Copying student" << endl;
                id = s.id;
                for (int i = 0; i < 5; i++) {
                        Course *temp = new Course(s.courses[i]->name);
                        courses[i] = temp;
                }
        }
        Student &operator=(const Student &s) {
                cout << "Assigning student" << endl;
                id = s.id;
                for (int i = 0; i < 5; i++) {
                        courses[i] = s.courses[i];
                }
                return *this;
        }
        ~Student() {
                for (int i = 0; i < 5; i++) {
                        delete courses[i];
                }
        }
        void print() {
                cout << id << ": " << endl;
                for (int i = 0; i < 5; i++) {
                        cout << courses[i]->name << endl;
                }
        }
        void addCourse(Course *c) {
                delete courses[size];
                courses[size] = c;
                size++;
        }
};

ostream &operator<<(ostream &os, Course *c) {
        return os << c->name << endl;
}

int main() {
        Student one(2342134);
        Course cs246("cs246");
        Course cs245("cs245");
        one.addCourse(&cs246);
        one.addCourse(&cs245);
        one.print();
        Student two = one;
        two.print();
}

这是错误

2342134:
cs246
cs245
Course
Course
Course
Copying student
2342134:
cs246
cs245
Course
Course
Course
*** glibc detected *** ./a.out: double free or corruption (fasttop): 0x0000000000cd8db0 ***
======= Backtrace: =========
/lib/x86_64-linux-gnu/libc.so.6(+0x7db26)[0x7f359a7ddb26]
/usr/lib/x86_64-linux-gnu/libstdc++.so.6(_ZNSsD1Ev+0x40)[0x7f359adf87c0]
./a.out[0x40111e]
./a.out[0x401152]
./a.out[0x400dc7]
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xed)[0x7f359a78176d]
./a.out[0x400b89]
======= Memory map: ========
00400000-00402000 r-xp 00000000 00:34 45960378                           /u3/z38ahmed/cs246/1161/exam/2.22_Object/2.22.5_Copy-Constructor-and-Assignment/a.out
00601000-00602000 r--p 00001000 00:34 45960378                           /u3/z38ahmed/cs246/1161/exam/2.22_Object/2.22.5_Copy-Constructor-and-Assignment/a.out
00602000-00603000 rw-p 00002000 00:34 45960378                           /u3/z38ahmed/cs246/1161/exam/2.22_Object/2.22.5_Copy-Constructor-and-Assignment/a.out
00cc7000-00cf9000 rw-p 00000000 00:00 0                                  [heap]
7f359a460000-7f359a55b000 r-xp 00000000 fc:00 915519                     /lib/x86_64-linux-gnu/libm-2.15.so
7f359a55b000-7f359a75a000 ---p 000fb000 fc:00 915519                     /lib/x86_64-linux-gnu/libm-2.15.so
7f359a75a000-7f359a75b000 r--p 000fa000 fc:00 915519                     /lib/x86_64-linux-gnu/libm-2.15.so
7f359a75b000-7f359a75c000 rw-p 000fb000 fc:00 915519                     /lib/x86_64-linux-gnu/libm-2.15.so
7f359a760000-7f359a914000 r-xp 00000000 fc:00 915563                     /lib/x86_64-linux-gnu/libc-2.15.so
7f359a914000-7f359ab13000 ---p 001b4000 fc:00 915563                     /lib/x86_64-linux-gnu/libc-2.15.so
7f359ab13000-7f359ab17000 r--p 001b3000 fc:00 915563                     /lib/x86_64-linux-gnu/libc-2.15.so
7f359ab17000-7f359ab19000 rw-p 001b7000 fc:00 915563                     /lib/x86_64-linux-gnu/libc-2.15.so
7f359ab19000-7f359ab1e000 rw-p 00000000 00:00 0
7f359ab20000-7f359ab36000 r-xp 00000000 fc:00 914560                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f359ab36000-7f359ad35000 ---p 00016000 fc:00 914560                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f359ad35000-7f359ad36000 r--p 00015000 fc:00 914560                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f359ad36000-7f359ad37000 rw-p 00016000 fc:00 914560                     /lib/x86_64-linux-gnu/libgcc_s.so.1
7f359ad38000-7f359ae3a000 r-xp 00000000 fc:00 396701                     /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21
7f359ae3a000-7f359b039000 ---p 00102000 fc:00 396701                     /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21
7f359b039000-7f359b041000 r--p 00101000 fc:00 396701                     /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21
7f359b041000-7f359b043000 rw-p 00109000 fc:00 396701                     /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21
7f359b043000-7f359b046000 rw-p 00000000 00:00 0
7f359b048000-7f359b06a000 r-xp 00000000 fc:00 915535                     /lib/x86_64-linux-gnu/ld-2.15.so
7f359b268000-7f359b26a000 rw-p 00000000 00:00 0
7f359b26a000-7f359b26b000 r--p 00022000 fc:00 915535                     /lib/x86_64-linux-gnu/ld-2.15.so
7f359b26b000-7f359b26d000 rw-p 00023000 fc:00 915535                     /lib/x86_64-linux-gnu/ld-2.15.so
7f359b26d000-7f359b274000 rw-p 00000000 00:00 0
7ffdfdac4000-7ffdfdae5000 rw-p 00000000 00:00 0                          [stack]
7ffdfdb78000-7ffdfdb7a000 r-xp 00000000 00:00 0                          [vdso]
ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0                  [vsyscall]
Aborted

我不知道glibc意味着什么,但我不知道我在哪里双重释放。当我注释掉Student destructor时,代码工作正常。这是为什么?我已经为每个课程分配了内存,所以我在析构函数中释放了这个内存,所以我认为没有它就可以使用该程序,但确实如此。 编辑:还有一件事。当我评论出学生二=一时,它并没有什么不同; line,所以我猜测错误在addCourse()和/或析构函数中

很抱歉这是一个很长的问题 非常感谢SO

3 个答案:

答案 0 :(得分:1)

您的分配操作员遇到问题:

   Student &operator=(const Student &s) {
            cout << "Assigning student" << endl;
            id = s.id;
            for (int i = 0; i < 5; i++) {
                    courses[i] = s.courses[i];
            }
            return *this;
    }

您复制原始指针而不是对象,然后2个单独的Student个对象拥有相同的Course个,因此第二次Student相同Course的析构函数被破坏。可能你想要:

  *(courses[i]) = *(s.courses[i]);

代替。

答案 1 :(得分:1)

您的赋值运算符不正确,正如其他答案所指出的那样。

但是要轻松解决您的问题,只需使用copy / swap,因为您已为您的类编写了复制构造函数和析构函数:

#include <algorithm>
//...
Student &operator=(const Student &s) 
{
   cout << "Assigning student" << endl;
   Student temp(s);
   std::swap(temp.id, id);
   std::swap(temp.courses, courses);
   return *this;
}

我们刚刚从传入的Student创建了一个临时的Student副本,然后将当前学生的内部成员与临时成员交换出来。同样,这只适用于Student(您已经提供)的工作副本构造函数和析构函数。

另一个问题是addCourse功能。问题是你给它指向动态分配的对象。当调用析构函数时,它假定所有指针都来自对new的调用,而不是。

 void addCourse(Course *c) {
        delete courses[size];
        courses[size] = c;
        size++;
    }

~Student() {
    for (int i = 0; i < 5; i++) {
        delete courses[i];  // <-- Assumes all courses were allocated dynamically
    }
}

//...

Course cs246("cs246");
Course cs245("cs245");
one.addCourse(&cs246); // <-- Not allocated with new
one.addCourse(&cs245); // <-- Not allocated with new

这是您设计中的一个缺陷。要么通过main

大喊大叫,请不要这样做

请勿执行此操作,我只使用new分配的内容,并使用此代码:

Course* cs246 = new Course("cs246");
Course* cs245 = new Course("cs245");
one.addCourse(cs246);
one.addCourse(cs245);

Live Example

参考课程并复制它们(类似于vector的工作原理)并在课堂上自己管理记忆。

void addCourse(const Course& c) 
{
    delete courses[size];
    Course* temp = new Course(c);
    courses[size] = temp;
    size++;
}

//...

Course cs246("cs246");
Course cs245("cs245");
one.addCourse(cs246);
one.addCourse(cs245);

Live Example

答案 2 :(得分:0)

Student &operator=(const Student &s)中,您正在复制指向s的课程的指针,因此您将获得双重删除。

我相信,为了你的作业,你可以像在复制构造函数中那样做 - 创建具有相同名称的新课程。