Control: reassign -1 libgd2 Control: affects -1 mscgen (Re-assigning this to libgd3 because that is where the original bug was found and fixed).
Ondřej Surý: > My very quick guess would be that in the last case `-1` is returned > and therefore mscgen fails on `realloc(ptr, -1)`. I guess this needs > to be fixed in the mscgen. > > libgd2 is such a mess :-(. (Actually, all the graphics libraries are such > a mess :-(…) > > Ondrej > -- > Ondřej Surý > ond...@sury.org > > [...] No, we literally crash on when calling realloc(ptr, 48), which is why I suspect a memory corruption. That is only for the case where the realloc is called by mscgen. In the other case, where libgd chokes on its own, I do not know what it passed to realloc. I strongly suspect there is another bug in libgd3. Thanks, ~Niels
