Re: [Tuxmath-devel] bug asteroid mode identified

[Dennis S. <de...@va...>]

I can duplicate the problem

$ lsb_release -d
Description:	Ubuntu 12.04.2 LTS
$ uname -a
Linux dev 3.2.0-39-generic #62-Ubuntu SMP Thu Feb 28 00:28:53 UTC 2013
x86_64 x86_64 x86_64 GNU/Linux

The crash is caused by a call in the factoroids.c file in the
FF_exit_free() function.  The second statement in that function,
"free(asteroid)", is where the crash happens.

"$export MALLOC_CHECK_=0" prevents the crash, but then the game is
broken in more subtle ways as noted by Marc Parenthoen.

*** glibc detected *** /usr/games/tuxmath: double free or corruption
(!prev): 0x00000000013c96e0 *
**

(gdb) bt
#0  0x00007ffff62d4425 in raise () from /lib/x86_64-linux-gnu/libc.so.6
#1  0x00007ffff62d7b8b in abort () from /lib/x86_64-linux-gnu/libc.so.6
#2  0x00007ffff631239e in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#3  0x00007ffff631cb96 in ?? () from /lib/x86_64-linux-gnu/libc.so.6
#4  0x000000000041151f in FF_exit_free () at factoroids.c:1360
#5  0x00000000004120d5 in FF_over (game_status=5) at factoroids.c:1345
#6  0x0000000000407b28 in run_factoroids (choice=0) at menu.c:545
#7  0x0000000000409cef in handle_activity (act=10, param=0) at menu.c:354
#8  0x00000000004091f1 in run_menu (root=0xbe9080, return_choice=false)
    at menu.c:1122
#9  0x000000000040a38e in RunMainMenu () at menu.c:1619
#10 0x0000000000406bbc in TitleScreen () at titlescreen.c:286
#11 0x0000000000403c23 in main (argc=<optimized out>, argv=0x7fffffffe7a8)
    at tuxmath.c:57