Hi all,

I got this code:
#include <u.h>
#include <libc.h>


void main(int argc, char **argv) {
        int i;
        char *m00;

        for(i=0; i<=5; i++) {
                if((m00 = malloc(strlen("Hello World"))) == nil) {
                        print("drama! [%d]\n",i);
                        exits("malloc");
                }
                strcpy(m00,"Hello World");
                print("%d> %s\n",i,m00);
                free(m00);
        }
        exits(nil);
}

If I run that, I get:
term% 8c foo.c && 8l foo.8
term% 8.out
0> Hello World
mem user overflow
pool sbrkmem block a460
hdr 0a110c09 00000040 0000104f 00000000 6c6c6548 6f57206f
tail 00000000 00000000 00000000 00000000 00000000 00000000 | ef2d00be 00000040
user data 6c 6f 20 57  6f 72 6c 64 | 00 fe f1 f0  00 00 00 00
panic: pool panic
8.out 1430: suicide: sys: trap: fault read addr=0x0 pc=0x0000324a
term% 


Without the free()-call in the loop, it does not crash - why is that? Also, I 
see programs just get killed without any warning/error-message anywhere - 
commenting out random free() calls seem to help ^^

Can somebody explain what is going on?


Mfg, Sascha

Reply via email to