For some reason, when you scroll to the bottom of the stamps and click one,
and then switch to paintbrush and scroll down once, "cur_brush" is being set
to a large value (probably the number of the stamp you clicked).

This shouldn't happen, and therefore "render_brush()" never thinks to check
whether 'cur_brush' is within bounds.  This causes an array overrun,
segfault, CRASH!

Thanks for finding a replicable way of getting the bug to show up, John.
I ran gdb (no debugging symbols, just wanted to see WHERE it segfaulted)
and tracked it down to this.

I've added a bounds check, but that's kludge.  I need to find out WHY
switching tools is keeping the previous tool's selection.


Working on it...

-bill!
[EMAIL PROTECTED]                           Got kids?  Get Tux Paint! 
http://newbreedsoftware.com/bill/       http://newbreedsoftware.com/tuxpaint/

_______________________________________________
Tuxpaint-dev mailing list
[EMAIL PROTECTED]
http://tux4kids.net/mailman/listinfo/tuxpaint-dev

Reply via email to