[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: SEGFAULT with NULL backend suffix definition (ITS#23)
>Dammit! I've found a bug :)
>
>back-ldbm/search.c - call to subtree_candidate with UNINITIALIZED char *
>matched.
>On exit, where nothing was found, matched still NOT NULL and on following
>call free(matched), arbitraty data (in my case, it was Op structure -
>garbage was left on stack by previous call ) will freed. Any next calloc
>will owerwrite op structure and cause unpredictable results.
>
>So - just init matched on declare time
>
>char * matched = NULL;
I drop another look to code, and think, that best place to init matched -
subtree_candidates before dn2entry_r(). But it can depends..