From mboxrd@z Thu Jan  1 00:00:00 1970
Path: news.gmane.org!not-for-mail
From: Chong Yidong <cyd@stupidchicken.com>
Newsgroups: gmane.emacs.devel
Subject: Re: define-prefix-command with a name,
	pressing key sequence bound to it results in memory corruption
Date: Sat, 25 Oct 2008 16:25:14 -0400
Message-ID: <87y70cqv6d.fsf@cyd.mit.edu>
References: <87ljwcsdkt.fsf@cyd.mit.edu>
NNTP-Posting-Host: lo.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: ger.gmane.org 1224966330 23957 80.91.229.12 (25 Oct 2008 20:25:30 GMT)
X-Complaints-To: usenet@ger.gmane.org
NNTP-Posting-Date: Sat, 25 Oct 2008 20:25:30 +0000 (UTC)
Cc: 1245-done@emacsbugs.donarmstrong.com
To: emacs-devel@gnu.org
Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sat Oct 25 22:26:31 2008
connect(): Connection refused
Return-path: <emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org>
Envelope-to: ged-emacs-devel@m.gmane.org
Original-Received: from lists.gnu.org ([199.232.76.165])
	by lo.gmane.org with esmtp (Exim 4.50)
	id 1KtpiQ-0002TC-Ah
	for ged-emacs-devel@m.gmane.org; Sat, 25 Oct 2008 22:26:30 +0200
Original-Received: from localhost ([127.0.0.1]:51383 helo=lists.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43)
	id 1KtphG-0003c2-Lv
	for ged-emacs-devel@m.gmane.org; Sat, 25 Oct 2008 16:25:18 -0400
Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1KtphB-0003bn-QA
	for emacs-devel@gnu.org; Sat, 25 Oct 2008 16:25:13 -0400
Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1KtphA-0003bb-Cj
	for emacs-devel@gnu.org; Sat, 25 Oct 2008 16:25:13 -0400
Original-Received: from [199.232.76.173] (port=37114 helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1KtphA-0003bY-5I
	for emacs-devel@gnu.org; Sat, 25 Oct 2008 16:25:12 -0400
Original-Received: from cyd.mit.edu ([18.115.2.24]:55817)
	by monty-python.gnu.org with esmtp (Exim 4.60)
	(envelope-from <cyd@stupidchicken.com>) id 1Ktph9-0000In-Sl
	for emacs-devel@gnu.org; Sat, 25 Oct 2008 16:25:12 -0400
Original-Received: by cyd.mit.edu (Postfix, from userid 1000)
	id D5F5E57E1BA; Sat, 25 Oct 2008 16:25:14 -0400 (EDT)
In-Reply-To: <87ljwcsdkt.fsf@cyd.mit.edu> (Chong Yidong's message of "Sat, 25
	Oct 2008 15:02:26 -0400")
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.0.60 (gnu/linux)
X-detected-operating-system: by monty-python.gnu.org: Genre and OS details not
	recognized.
X-BeenThere: emacs-devel@gnu.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Emacs development discussions." <emacs-devel.gnu.org>
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/emacs-devel>
List-Post: <mailto:emacs-devel@gnu.org>
List-Help: <mailto:emacs-devel-request@gnu.org?subject=help>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=subscribe>
Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Xref: news.gmane.org gmane.emacs.devel:105007
Archived-At: <http://permalink.gmane.org/gmane.emacs.devel/105007>

Chong Yidong <cyd@stupidchicken.com> writes:

> I can reproduce this.
>
> It's strange that realloc fails.  If you replacing the xrealloc in
> enlarge_buffer_text with xmalloc/bcopy/xfree, Emacs crashes at the call
> to malloc.
>
> Anyone have an idea what causes this?

Found the bug: a bad strcpy in read_char_minibuf_menu_prompt.  I've
checked in a fix.