Re: General bug - No out of bounds checking on 3D coordinates

[Ethan A M. <merritt@u.washington.edu>]

On Sunday 04 July 2004 11:46 am, Ethan A Merritt wrote:
>
> The basic problem is that the 3D mapping routine map3d_xy() in util3d.c
> stuffs its output into (unsigned int) terminal coordinates.
> But it does so without ever checking that the results are positive numbers.
>
> This may also happen with 2D plots, but if so I haven't encountered it yet.

But now I have.
The new emf driver segfaults in arrowstyle.dem for the same reason:

Program received signal SIGSEGV, Segmentation fault.
0x00000000 in ?? ()
(gdb) where
#0  0x00000000 in ?? ()
#1  0x080ab1d8 in do_arrow (sx=0, sy=0, ex=135447060, ey=135447060, head=0) at 
term.c:938
#2  0x0806917b in place_arrows (layer=0) at graphics.c:1114


-- 
Ethan A Merritt
Department of Biochemistry & Biomolecular Structure Center
University of Washington, Seattle