From owner-freebsd-hackers  Tue Aug 28 10:36: 4 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from alpo.whistle.com (s206m1.whistle.com [207.76.206.1])
	by hub.freebsd.org (Postfix) with ESMTP id E206637B403
	for <FreeBSD-hackers@FreeBSD.ORG>; Tue, 28 Aug 2001 10:36:01 -0700 (PDT)
	(envelope-from mark@whistle.com)
Received: from [207.76.207.129] (PBG4.whistle.com [207.76.207.129])
	by alpo.whistle.com (8.9.1a/8.9.1) with ESMTP id KAA74870
	for <FreeBSD-hackers@FreeBSD.ORG>; Tue, 28 Aug 2001 10:33:47 -0700 (PDT)
Mime-Version: 1.0
X-Sender: mark-ml@207.76.206.1
Message-Id: <p0510030db7b1861e1470@[207.76.207.129]>
In-Reply-To: <00e101c12fe5$a95bda70$28d90c42@eservoffice.com>
References: 
 <3B8AC157.5000203@yahoo.com><020701c12f43$8e0e2310$28d90c42@eservoffice.co
 m><3B8AC8DB.5090603@yahoo.com><004801c12f49$66cccb20$28d90c42@eservoffice.
 com><20010827201407.A32152@virtual-voodoo.com><3B8B05AF.9070004@yahoo.com>
 <20010827200243.A8113@dragon.nuxi.com><20010828092016.B21396@virtual-voodo
 o.com> <15243.50114.846473.519938@grasshopper.cs.duke.edu>
 <00e101c12fe5$a95bda70$28d90c42@eservoffice.com>
Date: Tue, 28 Aug 2001 10:34:24 -0700
To: <FreeBSD-hackers@FreeBSD.ORG>
From: Mark Peek <mark@whistle.com>
Subject: Re: TCSH bug...
Content-Type: text/plain; charset="us-ascii"
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

At 12:19 PM -0500 8/28/01, Steven Ames wrote:
>I will submit a problem report to Christos but I want to make sure
>that I can explain exactly what is happening and why...

Memory is getting freed out from under a pointer to that memory. I just
submitted this patch to the tcsh mailing list and hopefully Christos or
someone else can validate that it is the correct patch to make.

Mark

Index: tc.func.c
===================================================================
RCS file: /cvs/freebsd/src/contrib/tcsh/tc.func.c,v
retrieving revision 1.1.1.2.2.2
diff -u -r1.1.1.2.2.2 tc.func.c
--- tc.func.c	2001/03/05 05:50:09	1.1.1.2.2.2
+++ tc.func.c	2001/08/28 17:20:59
@@ -1259,6 +1259,7 @@
 			    del = tmp;
 			    xfree((ptr_t) del);
 			}
+			we = tmp;
 		    }
 		}
 	    }


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message