[Freeciv-Dev] (PR#13177) pubserver crash with /away

["Jason Dorje Short" <jdorje@xxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=13177 >

1.  Connect to server.
2.  /detach
3.  /away
4.  Boom.

-jason


-------- Original Message --------
Subject: [Freeciv-Dev] civserver crashed:
http://pubserver.freeciv.org/games/424326
Date: Wed, 25 May 2005 12:06:30 -0700
From: freeciv@xxxxxxxxxxxxxxxxxxxxx
To: freeciv-dev@xxxxxxxxxxx



# examining core.30195 in /games/424326/. ...
# using $FREECIV_PATH 
:/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-05-25_09.00+mintimeout+original_gamelog/share/freeciv
# running: (echo bt full; echo quit; exec yes '') | gdb  
/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-05-25_09.00+mintimeout+original_gamelog/share/freeciv/../../bin/civserver
 core.30195
GNU gdb Red Hat Linux (5.2-2)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
Core was generated by 
`/home/freeciv/.freeciv/code/installed/cvs/S2_0/2005-05-25_09.00+mintimeout+orig'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_dns.so.2...done.
Loaded symbols for /lib/libnss_dns.so.2
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
#0  0x08052933 in set_away (caller=0x817ff60, name=0xbfffd430 "", check=false)
    at stdinhand.c:1854
1854      } else if (!caller->player->ai.control && !check) {
(gdb) #0  0x08052933 in set_away (caller=0x817ff60, name=0xbfffd430 "", 
check=false)
    at stdinhand.c:1854
        caller = (struct connection *) 0x817ff60
        name = 0xbfffd431 "how"
        check = false
#1  0x080558ff in handle_stdin_input (caller=0x817ff60, str=0x89fe908 "/away", 
    check=false) at stdinhand.c:3443
        str = 0xffffffff <Address 0xffffffff out of bounds>
        command = "away\0ve\0\0\0\0\0\0\0\0\0ÇÛÿ¿\0\0\0\0\0\0\0\0\034\0s 
\0\0\0\0ÿÿÿÿßÿÿÿ", '\0' <repeats 36 times>, 
"@\001\026\bà×ÿ¿¨×ÿ¿\f\003\027@°Öÿ¿à×ÿ¿\0\0\0\0²ä\021\b\225\005\021\b\210íÿ¿\0\0\0\0\0\0\0\0\bÜÿ¿\0\0\0\0\"\0\0\0ÿÿÿÿ\0\0\0\00Øÿ6/Üÿ¿\0\0\0\0\0×ÿ¿\022\0\0\0\030×ÿ¿Æì\v@\036\0\0\0\005\0\0\0\0\0\0\0\f\003\027@\0\0\0\0\225\005\021\bÈÝÿ¿\232±\t@àÝÿ¿\225\005\021\b\0\0\0\0jõ\v@\f\003"...
        arg = "\0how\0*\022\b\bÛÿ¿\232±\t@ 
Ûÿ¿Ú*\022\b\005\0\0\0Ù*\022\bplayer0\00\0\0\0è\216\203\bplayer6\0\210Ôÿ¿ÎU\t\bàÝ\t@\017\0\0\00\0\0\0\0\0\0\0player4\0¸Ôÿ¿\rc\t\bè\216\203\b\017\0\0\0\210Ýÿ¿\201\202\017\bÐÔÿ¿àÔÿ¿\001\0\0\0Æì\v@player6\0\0\0\0\0\f\003\027@\0\0\0\0\225\005\021\b\230Ûÿ¿\232±\t@°Ûÿ¿\225\005\021\b\0\0\0\0\224\005\021\b\004\0\0\0\031\0\0\0\030Õÿ¿\001\0\0\0è\216\203\b\006\0\0\0"...
        allargs = 
"\0how\0\0\0\0\025\0\0\0ÿÿÿÿxË\022\b\200Òÿ¿\0\0\0\0\0\0\0\0\234U\021\bÈ", '\0' 
<repeats 11 times>, "øfJ\bÐÒÿ¿\0\0\0\0ëØ\t\bÌ-\022\b1", '\0' <repeats 11 
times>, "\tÌ\021\bÈ", '\0' <repeats 11 times>, 
"\202Ð\022\bÐÒÿ¿\0\0\0\0\0\0\0\0[8\022\b\022", '\0' <repeats 11 times>, 
"å6\022\b\022", '\0' <repeats 11 times>, 
"\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022\0\0\0\022"...
        full_command = 
"away\0ve\0hÐÿ¿\ní\v@ÚØÿ¿bË\022\b\026\0\0\0ÚØÿ¿\233Øÿ¿èÄ×\b\0\0\0\0Æì\v@\026\0\0\0bË\022\b\0\0\0\0\f\003\027@\001\0\0\0\233U\021\bH×ÿ¿\232±\t@`×ÿ¿\233U\021\b\001\0\0\0\232U\021\b4\\ò\bøÙó\b\0\0\0\0Æì\v@\001\0\0\0\bÌ\021\b\0\0\0\0\f\003\027@\006\0\0\0|Ð\022\b\210×ÿ¿\232±\t@ ×ÿ¿|Ð\022\b\006\0\0\0{Ð\022\b\016\0\0\0×6\022\b¨×ÿ¿ A\026@àÝ\t@×6\022\b\016\0\0\0Ö6\022\bàÝ\t@\n\0\0\0"...
        cptr_s = 0x89fe90d ""
        cptr_d = 0xffffffff <Address 0xffffffff out of bounds>
        i = -1
        cmd = CMD_AWAY
#2  0x0806a533 in handle_chat_msg_req (pconn=0x817ff60, 
    message=0x89fe908 "/away") at handchat.c:175
        sender_name = "\f\216\037\b\0\0\0\0Hßÿ¿¸\222\t\b@×\027\b\030g+\b", '\0' 
<repeats 16 times>, 
"hßÿ¿^\235\t\b\200ßÿ¿\002\0\0\0\230ßÿ¿\200ßÿ¿\003\0\0\0 ßÿ¿¸ï"
        chat = 
"Ð \203\b\0\0\0\0xÙÿ¿\227¼\t\b\001\0\0\0ìò\037\bxÙÿ¿\023½\t\b9\0\0\0/\0\0\09\0\0\0\017¼\t\b\001\0\0\0\\%
 
\b\002\0\0\0\0\0\0\0ÐT\021\b\025\0\0\0\0\0\0\0@\233A\bÐ \203\bÐñ~\b¨Ùÿ¿z½\t\b\0\0\0\0\001\0\0\0ìò\037\bÐ \203\bÈ\0\0\0\0\0\0\0¸Ùÿ¿!M\t\b\002\0\0\0\002\0\0\0ØÙÿ¿\225Î\004\b\001 \203\bC\0\0\0ØÙÿ¿`U\t\bC\0\0\0\004\0\0\0èÙÿ¿ëØ\t\b3\0\0\0\a\0\0\0øÙÿ¿`U\t\b\a\0\0\0/\0\0\0"...
        cp = 0x89fe90d ""
#3  0x0804ecb1 in handle_packet_input (pconn=0x817ff60, packet=0x89fe908, 
    type=19) at srv_main.c:966
        packet = (void *) 0x0
        type = 19
        pplayer = (struct player *) 0x817ff60
#4  0x080867ee in sniff_packets () at sernet.c:629
        command_ok = 135790432
        packet = (void *) 0x89fe908
        type = PACKET_CHAT_MSG_REQ
        result = true
        i = 57
        max_desc = 135790432
        readfs = {__fds_bits = {4096, 0 <repeats 31 times>}}
        writefs = {__fds_bits = {0 <repeats 32 times>}}
        exceptfs = {__fds_bits = {0 <repeats 32 times>}}
        tv = {tv_sec = 0, tv_usec = 280000}
        year = -175
#5  0x0804f8fd in main_loop () at srv_main.c:1577
        eot_timer = (struct timer *) 0x8485c70
        save_counter = 1
        is_new_turn = true
#6  0x0804fa81 in srv_main () at srv_main.c:1670
No locals.
#7  0x0804a5f0 in main (argc=14, argv=0xbffff5d4) at civserver.c:200
        argc = 14
        argv = (char **) 0xbffff5d4
        inx = 14
        showhelp = false
        showvers = false
        option = 0x0
#8  0x400651c4 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
(gdb)