Segmentation fault in free_io_mem

[Johannes Kliemann]

Hi all,

while testing the IO_MEM session on Linux with ACPI I noticed that the
acpi_drv segfaults when freeing its io memory on
repos/os/src/drivers/acpi/acpi.cc:1304 [1]. The crash happens then in
repos/base/include/base/allocator.h:319 at

> operator delete (obj, dealloc);

I noticed that this is called many times without problems but not from
free_io_mem. Unfortunately I have to admit that my C++ knowledge is
insufficient to really grasp what happens in this expression.
Is there any difference in how io memory is freed or should there be any
(at least on Linux)?

Regards,
Johannes

[1]:
https://github.com/jklmnn/genode/blob/c2e9d35010a8a3c4f79d51d022cb3e5beb6f0453/repos/os/src/drivers/acpi/acpi.cc#L1304
[2]:
https://github.com/jklmnn/genode/blob/c2e9d35010a8a3c4f79d51d022cb3e5beb6f0453/repos/base/include/base/allocator.h#L319