From mboxrd@z Thu Jan  1 00:00:00 1970
Path: news.gmane.org!not-for-mail
From: Eli Zaretskii <eliz@gnu.org>
Newsgroups: gmane.emacs.devel
Subject: Re: allocate_string_data memory corruption
Date: Thu, 19 Jan 2006 06:36:55 +0200
Message-ID: <ubqy87s0o.fsf@gnu.org>
References: <87vewha2zl.fsf@stupidchicken.com> <uk6cx6vj2.fsf@gnu.org>
	<871wz5f66t.fsf@stupidchicken.com>
Reply-To: Eli Zaretskii <eliz@gnu.org>
NNTP-Posting-Host: main.gmane.org
X-Trace: sea.gmane.org 1137645433 28634 80.91.229.2 (19 Jan 2006 04:37:13 GMT)
X-Complaints-To: usenet@sea.gmane.org
NNTP-Posting-Date: Thu, 19 Jan 2006 04:37:13 +0000 (UTC)
Cc: emacs-devel@gnu.org
Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Thu Jan 19 05:37:11 2006
Return-path: <emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org>
Envelope-to: ged-emacs-devel@m.gmane.org
Original-Received: from lists.gnu.org ([199.232.76.165])
	by ciao.gmane.org with esmtp (Exim 4.43)
	id 1EzRXm-00070x-Rv
	for ged-emacs-devel@m.gmane.org; Thu, 19 Jan 2006 05:37:07 +0100
Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43)
	id 1EzRaC-0006KA-T4
	for ged-emacs-devel@m.gmane.org; Wed, 18 Jan 2006 23:39:36 -0500
Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1EzRa4-0006Jv-Bx
	for emacs-devel@gnu.org; Wed, 18 Jan 2006 23:39:28 -0500
Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1EzRa2-0006Jj-T3
	for emacs-devel@gnu.org; Wed, 18 Jan 2006 23:39:28 -0500
Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1EzRa2-0006Jg-Qk
	for emacs-devel@gnu.org; Wed, 18 Jan 2006 23:39:26 -0500
Original-Received: from [192.114.186.17] (helo=gandalf.inter.net.il)
	by monty-python.gnu.org with esmtp (Exim 4.34) id 1EzRe1-0006zp-2n
	for emacs-devel@gnu.org; Wed, 18 Jan 2006 23:43:33 -0500
Original-Received: from nitzan.inter.net.il (nitzan.inter.net.il [192.114.186.20])
	by gandalf.inter.net.il (MOS 3.7.1-GA) with ESMTP id HPU49851;
	Thu, 19 Jan 2006 06:36:52 +0200 (IST)
Original-Received: from HOME-C4E4A596F7 (IGLD-80-230-33-91.inter.net.il [80.230.33.91])
	by nitzan.inter.net.il (MOS 3.7.3-GA)
	with ESMTP id CMX72640 (AUTH halo1);
	Thu, 19 Jan 2006 06:36:51 +0200 (IST)
Original-To: Chong Yidong <cyd@stupidchicken.com>
In-reply-to: <871wz5f66t.fsf@stupidchicken.com> (message from Chong Yidong on
	Wed, 18 Jan 2006 18:48:58 -0500)
X-BeenThere: emacs-devel@gnu.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Emacs development discussions." <emacs-devel.gnu.org>
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/emacs-devel>
List-Post: <mailto:emacs-devel@gnu.org>
List-Help: <mailto:emacs-devel-request@gnu.org?subject=help>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/emacs-devel>,
	<mailto:emacs-devel-request@gnu.org?subject=subscribe>
Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org
Xref: news.gmane.org gmane.emacs.devel:49256
Archived-At: <http://permalink.gmane.org/gmane.emacs.devel/49256>

> Cc: emacs-devel@gnu.org
> From: Chong Yidong <cyd@stupidchicken.com>
> Date: Wed, 18 Jan 2006 18:48:58 -0500
> 
> > Btw, does the value of `data' itself change in any way?  You didn't
> > show its value at the offending line.
> 
> `data' is just a variable, stored on the stack, that points to the
> next free region of memory in current_sblock (b->next_free).  I
> haven't considered the possibility that `data' itself could have
> changed.  I'll look into it.

If `data' is on the stack, perhaps it's changed by some ``no-op'' code
that smashes the stack.