[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Tinycc-devel] Crash report for [mob:3054a76]

From: grischka
Subject: Re: [Tinycc-devel] Crash report for [mob:3054a76]
Date: Fri, 11 Nov 2016 18:43:24 +0100
User-agent: Thunderbird (Windows/20090812)

Steffen Nurpmeso wrote:
Yes it is, there is a double free in conjunction with the
preprocessor end_macro() (imagine a smile here).  end_macro()
frees the macro and then that free_inline_functions or so tries to
frees it again, which causes a crash.

I think this was possible when you get a compile error within
the inline function.

In this case because of the longjmp in tcc_compile, the TokenString
was not removed from the macro_stack first, then it was freed in
free_inline_functions, and then again in tccpp_delete:end_macro.

Fixed here:


reply via email to

[Prev in Thread] Current Thread [Next in Thread]