[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[bug #30528] Segfault in linevector_free()
From: |
Petr Pisar |
Subject: |
[bug #30528] Segfault in linevector_free() |
Date: |
Fri, 23 Jul 2010 11:55:48 +0000 |
User-agent: |
Mozilla/5.0 (X11; U; Linux x86_64; cs-CZ; rv:1.9.2.4) Gecko/20100622 Fedora/3.6.4-1.fc13 Firefox/3.6.4 |
URL:
<http://savannah.nongnu.org/bugs/?30528>
Summary: Segfault in linevector_free()
Project: Concurrent Versions System
Submitted by: petrp
Submitted on: Fri 23 Jul 2010 11:55:48 AM GMT
Category: Bug Report
Severity: 3 - Normal
Item Group: None
Status: None
Privacy: Public
Assigned to: None
Open/Closed: Open
Release:
Discussion Lock: Any
Fixed Release: None
Fixed Feature Release: None
_______________________________________________________
Details:
Package: cvs-1.11.23-8.fc13
Architecture: x86_64
OS Release: Fedora release 13 (Goddard)
cvs update: Updating common/v
P common/v/latch_test_ctrl.v
cvs update: checksum failure after patch to common/v/latch_test_ctrl.v; will
refetch
P common/v/test_ctrl.v
cvs update: checksum failure after patch to common/v/test_ctrl.v; will
refetch
P common/v/test_ctrl_n.v
Segmentation fault (core dumped)
According back trace, it crashed in linevector_free() called from
apply_rcs_changes() operating on local temporary lines structure while
dereferrencing vec->vector[ln]:
/* Free storage associated with linevector. */
static void
linevector_free (vec)
struct linevector *vec;
{
unsigned int ln;
if (vec->vector != NULL)
{
for (ln = 0; ln < vec->nlines; ++ln)
→ if (vec->vector[ln] && --vec->vector[ln]->refcount == 0)
^^^^^^^^^^^^^^^^^
free (vec->vector[ln]);
free (vec->vector);
}
}
This bug has been reported to Fedora bug tracking system originally:
https://bugzilla.redhat.com/show_bug.cgi?id=617037
_______________________________________________________
File Attachments:
-------------------------------------------------------
Date: Fri 23 Jul 2010 11:55:48 AM GMT Name: backtrace Size: 10kB By:
petrp
Back trace
<http://savannah.nongnu.org/bugs/download.php?file_id=21038>
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/bugs/?30528>
_______________________________________________
Message sent via/by Savannah
http://savannah.nongnu.org/
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [bug #30528] Segfault in linevector_free(),
Petr Pisar <=