Opened 17 years ago

Closed 17 years ago

#475 closed Bugs (None)

wave crashes with this input

Reported by: jmihalicza Owned by: Hartmut Kaiser
Milestone: Component: None
Version: None Severity:
Keywords: Cc:

Description

wave.exe crashes when it is given this input.

Using a debugger it turns out that in cpp.re in the fill 
function memcpy gets a negative number as count (-> very 
big positive number 'coz size_t is unsigned) -> crash.
Somehow s->lim == 0, this is why count becomes negative 
in memcpy.

Change History (3)

comment:1 by jmihalicza, 17 years ago

Logged In: YES 
user_id=1335561

If the last character of the input is removed wave.exe runs with 
no crash.

comment:2 by Hartmut Kaiser, 17 years ago

Logged In: YES 
user_id=353975

Thank you for submitting a bug report to BOOST

comment:3 by Hartmut Kaiser, 17 years ago

Status: assignedclosed
Logged In: YES 
user_id=353975

Thanks for reporting this bug. 
It has been fixed in Boost CVS (HEAD).

Regards Hartmut

Note: See TracTickets for help on using tickets.