id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc 475,wave crashes with this input,jmihalicza,Hartmut Kaiser,"{{{ wave.exe crashes when it is given this input. Using a debugger it turns out that in cpp.re in the fill function memcpy gets a negative number as count (-> very big positive number 'coz size_t is unsigned) -> crash. Somehow s->lim == 0, this is why count becomes negative in memcpy. }}}",Bugs,closed,,None,None,,None,,