URL:
  <http://gna.org/bugs/?20728>

                 Summary: Pointer to barbarian leader who has died while
moving used afterwards
                 Project: Freeciv
            Submitted by: cazfi
            Submitted on: Mon 08 Apr 2013 11:42:55 PM EEST
                Category: None
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
             Assigned to: None
        Originator Email: 
             Open/Closed: Open
                 Release: 
         Discussion Lock: Any
        Operating System: None
         Planned Release: 

    _______________________________________________________

Details:

aiunit.c:2845 has dai_unit_goto() with ignored return value for barbarian
leader. Following lines, and the do-while() loop it's in assume leader pointer
to be still valid.

I've got semi-reproducible crash around here (actual crash happens at
different places on different runs, but it's probably caused by the fact that
leader has died here, its memory has been reused and filled with what then
causes crash when it's used as value within leader structure)





    _______________________________________________________

Reply to this item at:

  <http://gna.org/bugs/?20728>

_______________________________________________
  Message sent via/by Gna!
  http://gna.org/


_______________________________________________
Freeciv-dev mailing list
Freeciv-dev@gna.org
https://mail.gna.org/listinfo/freeciv-dev

Reply via email to