Subject: Re: continuous key press results in core dump (PR#331)
From: Peter Dalgaard BSA (firstname.lastname@example.org)
Date: Mon 22 Nov 1999 - 09:24:19 EST
Peter Dalgaard BSA <email@example.com> writes:
> Yup, in dstruct.c we have
> static int ddVal(SEXP name)
> char buf, *endp, *val;
> int rval;
> strcpy(buf, CHAR(name));
> ..which at the very least has to have a str*n*cpy in order not to
> corrupt the stack if CHAR(name) is too large. Or perhaps better:
> allocate buf explicitly instead of via a stack variable.
> Not sure I'll be able to get it fixed tonight though.
Squished. That buffer should never have been there in the first place...
-- O__ ---- Peter Dalgaard Blegdamsvej 3 c/ /'_ --- Dept. of Biostatistics 2200 Cph. N (*) \(*) -- University of Copenhagen Denmark Ph: (+45) 35327918 ~~~~~~~~~~ - (firstname.lastname@example.org) FAX: (+45) 35327907 -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- r-devel mailing list -- Read http://www.ci.tuwien.ac.at/~hornik/R/R-FAQ.html Send "info", "help", or "[un]subscribe" (in the "body", not the subject !) To: email@example.com _._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._._
This archive was generated by hypermail 2b25 : Tue 04 Jan 2000 - 14:16:10 EST