Re: gnuplot segfaults on keyboard interaction

[Jürgen W. <wie...@fr...>]

Am Montag, 15. März 2010 15:24:39 schrieb Benjamin Lindner:
> 
> But I managed to (hopefully) track it down to :
>  event_keypress()
>  builtin_toggle_grid()
>  do_string_replot()
>  replotrequest()
>  m_capture()  <- segfault
> 
> Here m_capture() is called with both the parameters "start" and "end" as -1
>  which (not surprisingly) leads to problems as the array token[] is indexed
>  with both start and end.
> 
> The problem is, that at the time replotrequest() is called from within
>  do_string_replot(), c_token is -1 and num_token is zero (Why? because
>  do_string_and_free() calls lf_pop(), which sets c_token=-1 and
>  num_token=0).
> 
> But apparently replotrequest() assumes that neither is the case, instead it
>  tries to read tokens where there are none.

A remarkably good bug report.  As far as I can see,
do_string_replot() should not call a function which takes a look at
the command line.  I am surprised that this has not produced more
problems so far.  I assume that part of replotrequest() belongs into
replot_command().  Unfortunately, I do not have time to look deeper
into this issue.

Juergen