Problem report #34

[Dan Nicolaescu <dann@ics.uci.edu>]

ERROR
CID: 34
Checker: OVERRUN_STATIC (help)
File: emacs/src/coding.c
Function: decode_coding_iso2022
Description: Overrun of static array "(((coding)->spec).iso2022).requested_designation" of size 255 at position 255 with index variable "charset"

At conditional (1): "(coding)->flags & 65536 == 0" taking false path

1995 		      if (! (coding->flags & CODING_FLAG_ISO_DESIGNATION))
1996 			goto label_invalid_code;

At conditional (2): "src >= src_end" taking false path
At conditional (3): "0" taking false path

1997 		      ONE_MORE_BYTE (c1);

At conditional (4): "c1 >= 64" taking false path

1998 		      if (c1 >= '@' && c1 <= 'B')
1999 			{	/* designation of JISX0208.1978, GB2312.1980,
2000 				   or JISX0208.1980 */
2001 			  DECODE_DESIGNATION (0, 2, 94, c1);
2002 			}

At conditional (5): "c1 >= 40" taking true path
At conditional (6): "c1 <= 43" taking false path

2003 		      else if (c1 >= 0x28 && c1 <= 0x2B)
2004 			{	/* designation of DIMENSION2_CHARS94 character set */
2005 			  ONE_MORE_BYTE (c2);
2006 			  DECODE_DESIGNATION (c1 - 0x28, 2, 94, c2);
2007 			}

At conditional (7): "c1 >= 44" taking true path
At conditional (8): "c1 <= 47" taking true path

2008 		      else if (c1 >= 0x2C && c1 <= 0x2F)
2009 			{	/* designation of DIMENSION2_CHARS96 character set */

At conditional (9): "src >= src_end" taking false path
At conditional (10): "0" taking false path

2010 			  ONE_MORE_BYTE (c2);

Event overrun-local: Overrun of static array "(((coding)->spec).iso2022).requested_designation" of size 255 at position 255 with index variable "charset"
At conditional (11): "c2 < 48" taking false path
At conditional (12): "c2 >= 128" taking false path
At conditional (13): "charset == 0" taking false path
At conditional (14): "charset == 158" taking false path
At conditional (15): "charset == 128" taking false path
At conditional (16): "charset >= 0" taking true path
At conditional (17): "charset <= 254" taking false path
At conditional (18): "charset < 240" taking false path
At conditional (19): "((charset >= 0 && charset <= 254 && (Vcharset_table & -8)->contents[((charset == 0) ? 0 : ((charset + 128)))] != Qnil) ? ((((0), ((Vcharset_table & -8)->contents[((charset == 0) ? 0 : ((charset + 128)))] & -8))->contents[2] >> 3 == 1) ? 1 : (0)) : (((charset < 240) ? 1 : (0)))) != 0" taking false path
At conditional (20): "charset < 240" taking false path
At conditional (21): "charset >= 0" taking true path

2011 			  DECODE_DESIGNATION (c1 - 0x2C, 2, 96, c2);
2012 			}
2013 		      else
2014 			goto label_invalid_code;
2015 		      /* We must update these variables now.  */