Hi,

When using plfill with arrays with too many elements, the number of elements used gets reduced to PL_MAXPOLY. If the values of the last elements are not equal to the first elements the number of elements is increased and the arrays will be written beyond their bounds. The bound_overflow patch fixes this issue.

c_plfill3 seems to have the same problem seems to have the same error (plfill.c:127), I've no test case for it so didn't fix it. Should I post a bug report or can you fix it quickly?

Regards,
Mark de Wever



Index: src/plfill.c
===================================================================
--- src/plfill.c        (revision 9796)
+++ src/plfill.c        (working copy)
@@ -75,7 +75,7 @@
     }
 
     if (x[0] != x[n-1] || y[0] != y[n-1]) {
-       n++;
+       if(n < PL_MAXPOLY) n++;
        xpoly[n-1] = plP_wcpcx(x[0]);
        ypoly[n-1] = plP_wcpcy(y[0]);
     }
------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p
_______________________________________________
Plplot-devel mailing list
Plplot-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/plplot-devel

Reply via email to