Re: [Fontforge-devel] ff 2006-07-15 segfaults

[Matthias K. <ki...@ou...>]

On Sun, Jul 23, 2006 at 10:58:02PM +0800, Arne G=F6tje (?????????) wrote:
> When I try to open this sfd file=20
> (http://debian.linux.org.tw/~arne/cjkunifonts/ukai_sfd.tar.bz2), ff=20
> segfaults. But I get no error message or coredump...=20

Limited core dump size? It's about 300 MB.

> Please check what's wrong... :)

Here's the stacktrace and some values; it seems like SFDReadUTF7Str(sfd)
above the for loop returns 0 at some point:

(gdb) where
#0  0x059d1956 in L2 () from /usr/lib/libc.so.39.2
#1  0x1c152010 in SFDReadAnchorPoints (sfd=3D0x25984380, sc=3D0x90f9030c,=
 lastap=3D0x0) at sfd.c:2682
#2  0x1c15348e in SFDGetChar (sfd=3D0x25984380, sf=3D0x7e879600) at sfd.c=
:2992
#3  0x1c15cb78 in SFD_GetFont (sfd=3D0x25984380, cidmaster=3D0x0, tok=3D0=
xcf7d42e0 "BeginChars:") at sfd.c:4969
#4  0x1c15ce84 in SFDRead (filename=3D0xcf7d53d0 "/home/kili/src/fontforg=
e/fail2/ukai.sfd") at sfd.c:5033
#5  0x1c0dd5a4 in ReadSplineFont (filename=3D0xcf7d53d0 "/home/kili/src/f=
ontforge/fail2/ukai.sfd", openflags=3D0) at fontview.c:10661
#6  0x1c0de6a6 in LoadSplineFont (filename=3D0xcf7d53d0 "/home/kili/src/f=
ontforge/fail2/ukai.sfd", openflags=3D0) at fontview.c:10896
#7  0x1c0de6e6 in ViewPostscriptFont (filename=3D0xcf7d53d0 "/home/kili/s=
rc/fontforge/fail2/ukai.sfd") at fontview.c:10905
#8  0x1c1b3c68 in FontForgeMain (argc=3D2, argv=3D0xcf7d587c) at start.c:=
789
#9  0x1c015006 in main (argc=3D2, argv=3D0xcf7d587c) at main.c:34
(gdb) up
#1  0x1c152010 in SFDReadAnchorPoints (sfd=3D0x25984380, sc=3D0x90f9030c,=
 lastap=3D0x0) at sfd.c:2682
2682	    for ( an=3Dsc->parent->anchor; an!=3DNULL && strcmp(an->name,nam=
e)!=3D0; an=3Dan->next );
(gdb) print an
$1 =3D (AnchorClass *) 0x8a801000
(gdb) print *an
$2 =3D {name =3D 0x837792b0 "Top", feature_tag =3D 1835102827, script_lan=
g_index =3D 0, flags =3D 0, merge_with =3D 1, type =3D 0, next =3D 0x8a80=
1018, processed =3D 0 '\0',=20
  has_mark =3D 0 '\0', matches =3D 0 '\0', ac_num =3D 0 '\0'}
(gdb) print name
$3 =3D 0x0

Ciao,
	Kili

ps: sorry, I've not enough time at the moment to do real debugging.