#535 highlighting pattern compilation crash

[Anonymous]

This bug is observed for both

NEdit 5.5
Sep 30, 2004

Built on: Linux, 386, GNU C
Built at: Oct 1 2004, 15:55:40
With Motif: 2.1.30 [@(#)Motif Version 2.1.30]
Running Motif: 2.1 [unknown]
Server: The X.Org Foundation 60900000
Visual: 24-bit TrueColor (ID 0x23, Default)
Locale: en_US

and

5.6 [Under Development] HEAD
Aug 7, 2006

Built on: Linux, 486, GNU C
Built at: Aug 7 2006, 11:25:05
With Motif: 1.2.0 [@(#)GNU/LessTif Version 1.2
Release 0.93.94]
Running Motif: 1.2 [unknown]
Server: The X.Org Foundation 60900000
Visual: 24-bit TrueColor (ID 0x23, Default)
Locale: en_US

Description:

1. Import attached "highlighting-bug2.pats" containing
patterns for LaTeX language.
2. Open any non-empty latex file (attached
highlighting-bug.tex, for example). Nedit crashes.

Step-by-step description

1. Import attached "highlighting-bug.pats" and open any
non-empty latex file.
2. Add new highlighting pattern in the following
manner: copy any ErrorTest pattern. You can also rename
pattern, change Highlight Style, edit pattern to make
it different from other paterns. For example change
from "(?:(?<!\\)#){1,2}" to "(?:(?<!\\)%){1,2}".
3. Apply patterns. Nedit crashes.

(gdb) r -server
Starting program: /tmp/nedit-5.5/source/nedit -server
Multiple event sequence ignored.

Multiple event sequence ignored.

Multiple event sequence ignored.

Multiple event sequence ignored.

Multiple event sequence ignored.

Multiple event sequence ignored.

Multiple event sequence ignored.

Name: shellMenu
Class: XmRowColumn

../../../lib/Xm/Manager.c:_XmManagerInstallAccelerator(2174)
- Could not convert >Ctrl<Key>KP_Enter< to a KeyCode
Ctrl<Key>KP_Enter -> 0000ff8d -> 0

*** glibc detected *** free(): invalid next size
(fast): 0x0847a848 ***

Program received signal SIGABRT, Aborted.
0xb7c427c7 in raise () from /lib/tls/libc.so.6
(gdb) bt full
#0 0xb7c427c7 in raise () from /lib/tls/libc.so.6
No symbol table info available.
#1 0xb7c4406b in abort () from /lib/tls/libc.so.6
No symbol table info available.
#2 0xb7c79545 in __fsetlocking () from /lib/tls/libc.so.6
No symbol table info available.
#3 0xb7c7fb97 in malloc_usable_size () from
/lib/tls/libc.so.6
No symbol table info available.
#4 0xb7c80032 in free () from /lib/tls/libc.so.6
No symbol table info available.
#5 0x08086877 in ExecRE ()
No symbol table info available.
#6 0x080a4b21 in parseString ()
No symbol table info available.
#7 0x080a23de in StartHighlighting ()
No symbol table info available.
#8 0x08076372 in reapplyLanguageMode ()
No symbol table info available.
#9 0x08071ea6 in SetLanguageMode ()
No symbol table info available.
#10 0x08071fab in DetermineLanguageMode ()
No symbol table info available.
#11 0x08050fe8 in EditExistingFile ()
No symbol table info available.
#12 0x08058619 in openAP ()
No symbol table info available.
#13 0xb7e9af7f in XtCallActionProc () from
/usr/X11R6/lib/libXt.so.6
No symbol table info available.
#14 0x0805c67c in openPrevCB ()
No symbol table info available.
#15 0xb7e6f8ec in XtCallCallbackList () from
/usr/X11R6/lib/libXt.so.6
No symbol table info available.
#16 0x081224ec in ButtonUp ()
No symbol table info available.
#17 0xb7ea2d04 in _XtMatchAtom () from
/usr/X11R6/lib/libXt.so.6
No symbol table info available.

Alexey Kuznetsov
kuzn@htsc.mephi.ru

P.S. I am a subscriber of nedit-developer list

[Nobody/Anonymous]

highlighting patterns

[Eddy De Greef]

Logged In: YES
user_id=73597

It was a bug in the regular expression engine: the
calculated size in a memory allocation was too small,
causing memory corruption.
It should now be fixed in CVS.

Thanks.