[boost] [Boost-bugs] [ boost-Bugs-1274584 ] wave crashes with this input

From: SourceForge.net (noreply_at_[hidden])
Date: 2005-08-27 08:12:49

Bugs item #1274584, was opened at 2005-08-27 15:12
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=107586&aid=1274584&group_id=7586

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: jmihalicza (jmihalicza)
Assigned to: Nobody/Anonymous (nobody)
Summary: wave crashes with this input

Initial Comment:
wave.exe crashes when it is given this input.

Using a debugger it turns out that in cpp.re in the fill 
function memcpy gets a negative number as count (-> very 
big positive number 'coz size_t is unsigned) -> crash.
Somehow s->lim == 0, this is why count becomes negative 
in memcpy.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=107586&aid=1274584&group_id=7586

-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Boost-bugs mailing list
Boost-bugs_at_[hidden]
https://lists.sourceforge.net/lists/listinfo/boost-bugs