Hi!

----

While testing AST "tr" for the issue described in
http://lists.research.att.com/pipermail/ast-developers/2013q1/002288.html
I hit a crash in AST "tr" on Solaris 11/B145/AMD64/64bit:
-- snip --
[snip]
Running: ksh -c "builtin tr ; tr -Cd "[=e=]" <<<"1e2é3" ; print"
(process id 24746)
Reading en_US.UTF-8.so.3
Reading methods_unicode.so.3
signal SEGV (no mapping at the fault address) in tropen at line 460 in
file "tr.c"
  460                           tr->code[c] |= DELBIT;
(dbx) print tr
tr = 0xfffffd7ffde00050
(dbx) print *tr
*tr = {
    context  = 0x6b2888
    convert  = 0
    count    = 0
    prev     = -1
    last     = -1
    level    = 0
    mb       = 1
    position = 0
    src      = 1114111
    dst      = 1113918
    type     = 1
    truncate = 0
    chars    = 1114112
    warn     = 1
    isit     = (nil)
    base     = (nil)
    next     = (nil)
    hold     = (nil)
    code     = (1073741824U)
}
(dbx) print c
c = 16843009
-- snip --

It looks array index |c| is far out of bounds...

----

Bye,
Roland

-- 
  __ .  . __
 (o.\ \/ /.o) [email protected]
  \__\/\/__/  MPEG specialist, C&&JAVA&&Sun&&Unix programmer
  /O /==\ O\  TEL +49 641 3992797
 (;O/ \/ \O;)
_______________________________________________
ast-developers mailing list
[email protected]
http://lists.research.att.com/mailman/listinfo/ast-developers

Reply via email to