URL:
<http://gna.org/bugs/?20728>
Summary: Pointer to barbarian leader who has died while
moving used afterwards
Project: Freeciv
Submitted by: cazfi
Submitted on: Mon 08 Apr 2013 11:42:55 PM EEST
Category: None
Severity: 3 - Normal
Priority: 5 - Normal
Status: None
Assigned to: None
Originator Email:
Open/Closed: Open
Release:
Discussion Lock: Any
Operating System: None
Planned Release:
_______________________________________________________
Details:
aiunit.c:2845 has dai_unit_goto() with ignored return value for barbarian
leader. Following lines, and the do-while() loop it's in assume leader pointer
to be still valid.
I've got semi-reproducible crash around here (actual crash happens at
different places on different runs, but it's probably caused by the fact that
leader has died here, its memory has been reused and filled with what then
causes crash when it's used as value within leader structure)
_______________________________________________________
Reply to this item at:
<http://gna.org/bugs/?20728>
_______________________________________________
Message sent via/by Gna!
http://gna.org/
_______________________________________________
Freeciv-dev mailing list
[email protected]
https://mail.gna.org/listinfo/freeciv-dev
