[Freeciv-Dev] (PR#17958) pubserver 1.14.2 crash in send_game_info

["Jason Dorje Short" <jdorje@xxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=17958 >



-------- Original Message --------
From: - Wed Jun 14 23:09:25 2006
X-Account-Key: account1
X-UIDL: GmailId10bd51646a968b60
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Gmail-Received: 7cf29cba5c842805e6406747d7895176d1727acf
Delivered-To: jdorje@xxxxxxxxx
Received: by 10.78.66.9 with SMTP id o9cs73151hua;        Wed, 14 Jun 
2006 17:27:55 -0700 (PDT)
Received: by 10.36.222.66 with SMTP id u66mr1942245nzg;        Wed, 14 
Jun 2006 17:27:55 -0700 (PDT)
Return-Path: <freeciv-dev-bounce@xxxxxxxxxxx>
Received: from mail.sourceforge.net (lists.sourceforge.net 
[66.35.250.206])        by mx.gmail.com with ESMTP id 
36si902005nza.2006.06.14.17.27.54;        Wed, 14 Jun 2006 17:27:55 
-0700 (PDT)
Received-SPF: neutral (gmail.com: 66.35.250.206 is neither permitted nor 
denied by best guess record for domain of freeciv-dev-bounce@xxxxxxxxxxx)
Received: from glockenspiel.complete.org ([69.10.152.57])       by 
mail.sourceforge.net with esmtps (TLSv1:AES256-SHA:256) (Exim 4.44)     id 
1FqfiA-0002A8-PM        for jdorje@xxxxxxxxxxxxxxxxxxxxx; Wed, 14 Jun 2006 
17:27:54 -0700
Received: from localhost ([127.0.0.1] helo=glockenspiel)        by 
glockenspiel.complete.org with esmtp    (Exim 4.50)     id 1Fqfb0-0004ds-HN; 
Wed, 14 Jun 2006 19:20:29 -0500
Received: with ECARTIS (v1.0.0; list freeciv-dev); Wed, 14 Jun 2006 
19:20:17 -0500 (CDT)
Received: from pubserver.freeciv.org ([207.158.49.131]) by 
glockenspiel.complete.org with esmtp    (Exim 4.50)     id 1Fqfad-0004dS-LM     
for 
freeciv-dev@xxxxxxxxxxx; Wed, 14 Jun 2006 19:20:17 -0500
Received: (from freeciv@localhost)      by pubserver.freeciv.org 
(8.12.11.20060308/8.12.11) id k5F0JkvZ012431    for 
freeciv-dev@xxxxxxxxxxx; Wed, 14 Jun 2006 17:19:46 -0700
Date: Wed, 14 Jun 2006 17:19:46 -0700
From: freeciv@xxxxxxxxxxxxxxxxxxxxx
To: freeciv-dev@xxxxxxxxxxx
Subject: [Freeciv-Dev] civserver crashed: 
http://pubserver.freeciv.org/games/628514
Message-ID: <20060614171946.A12429@xxxxxxxxxxxxxxxxxxxxx>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="r5Pyd7+fXNt84Ff3"
Content-Disposition: inline
User-Agent: Mutt/1.2.5.1i
X-Spam-Status: No (score 0.2): AWL=0.001, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Wed, 14 Jun 
2006 19:20:17 -0500
X-archive-position: 5176
X-ecartis-version: Ecartis v1.0.0
Sender: freeciv-dev-bounce@xxxxxxxxxxx
Errors-to: freeciv-dev-bounce@xxxxxxxxxxx
X-original-sender: freeciv@xxxxxxxxxxxxxxxxxxxxx
Precedence: bulk
List-help: <mailto:ecartis@xxxxxxxxxxx?Subject=help>
List-unsubscribe: 
<mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=unsubscribe>
List-software: Ecartis version 1.0.0
List-Id: <freeciv-dev.freeciv.org>
X-List-ID: <freeciv-dev.freeciv.org>
List-subscribe: <mailto:freeciv-dev-request@xxxxxxxxxxx?Subject=subscribe>
List-owner: <mailto:freeciv-dev-admins@xxxxxxxxxxx>
List-post: <mailto:freeciv-dev@xxxxxxxxxxx>
X-list: freeciv-dev
X-Spam-Status: No (score 0.2): AWL=0.001, NO_REAL_NAME=0.178
X-Virus-Scanned: by Exiscan on glockenspiel.complete.org at Wed, 14 Jun 
2006 19:20:29 -0500
X-Spam-Score: 0.2 (/)
X-Spam-Report: Spam Filtering performed by sourceforge.net.     See 
http://spamassassin.org/tag/ for more details.  Report problems to 
http://sf.net/tracker/?func=add&group_id=1&atid=200001  0.2 NO_REAL_NAME 
           From: does not include a real name



# examining core.17968 in /games/628514/. ...
# using $FREECIV_PATH 
:/home/freeciv/.freeciv/code/installed/web/stable/freeciv-1.14.2+mintimeout-1.14.2+newdead2/share/freeciv
# running: (echo bt full; echo quit; exec yes '') | gdb  
/home/freeciv/.freeciv/code/installed/web/stable/freeciv-1.14.2+mintimeout-1.14.2+newdead2/share/freeciv/../../bin/civserver
 core.17968
GNU gdb Red Hat Linux (5.2-2)
Copyright 2002 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux"...
Core was generated by 
`/home/freeciv/.freeciv/code/installed/web/stable/freeciv-1.14.2+mintimeout-1.14'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libm.so.6...done.
Loaded symbols for /lib/libm.so.6
Reading symbols from /usr/lib/libz.so.1...done.
Loaded symbols for /usr/lib/libz.so.1
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /lib/libnss_nisplus.so.2...done.
Loaded symbols for /lib/libnss_nisplus.so.2
Reading symbols from /lib/libnsl.so.1...done.
Loaded symbols for /lib/libnsl.so.1
Reading symbols from /lib/libnss_dns.so.2...done.
Loaded symbols for /lib/libnss_dns.so.2
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /usr/lib/gconv/ISO8859-1.so...done.
Loaded symbols for /usr/lib/gconv/ISO8859-1.so
#0  0x08067161 in send_game_info (dest=0x0) at gamehand.c:252
252       conn_list_iterate(*dest, pconn) {
(gdb) #0  0x08067161 in send_game_info (dest=0x0) at gamehand.c:252
        myiter = {list = 0x8191718, link = 0x656d614e}
        pconn = (struct connection *) 0xffffffff
        dest = (struct conn_list *) 0x8191718
        ginfo = {gold = 50, civstyle = 2, tech = 0, researchcost = 10, 
  skill_level = 7, timeout = 0, end_year = 2000, year = 1140, turn = 164, 
  min_players = 1, max_players = 33, nplayers = 33, player_idx = -1073751480, 
  globalwarming = 0, heating = 0, nuclearwinter = 0, cooling = 0, 
  cityfactor = 14, unhappysize = 4, angrycitizen = 1, diplcost = 0, 
  freecost = 0, conquercost = 0, global_advances = {1, 23, 255, 1, 3, 0, 0, 3, 
    1, 0, 1000, 5, 2, 0, 5, 0, 0, 5, 0, 0, 5, 1, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 
    5, 0, 0, 5, 15, 0, 5, 6, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 18, 0, 
    5, 0, 0, 5, 5, 0, 5, 1, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 
    22, 0, 5, 0, 0, 5, 27, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 0, 0, 5, 
    0, 0, 0, 0, 135862524, 135862524, 0, 135862524, 135862524, 0, 135862548, 
    135862548, 0, 135862548, 135862548, 0 <repeats 21 times>, 40, 60, 0, 0, 0, 
    0, -1, 0 <repeats 52 times>}, global_wonders = {0 <repeats 41 times>, 402, 
    0, 0, 0, 0, 402, 401, 402, 0, 0, 0, 719, 0, 0, 0, 0, 484, 0, 1027, 693, 0, 
    0, 0, 402, 0 <repeats 135 times>}, foodbox = 10, techpenalty = 100, 
  spacerace = 1, seconds_to_turndone = -1}
        i = -1
#1  0x08074d99 in dead_player (name=0xbfffe2b0 "t") at plrhand.c:1713
        nations_used = (int *) 0x8603860
        i = 0
        num_nations_avail = 29
        pick = 1701667150
        newplayer = 0
        cplayer = (struct player *) 0x8191700
#2  0x0804ff4c in create_dead (caller=0x80fdf58, arg=0xbfffe2b0 "t")
    at stdinhand.c:1838
        caller = (struct connection *) 0x80fdf58
        arg = 0xbfffe2b0 "t"
        pplayer = (struct player *) 0x656d614e
        PNameStatus = 1701667150
#3  0x0805263a in handle_stdin_input (caller=0x80fdf58, str=0x81c4528 "/d t")
    at stdinhand.c:3258
        str = 0x0
        command = "d\0desize        6      (1,50)\nnotradesize          3      
(0,49)\nunhappysize         *4      (1,6)\nangrycitizen        *1      
(0,1)\ncityfactor          *14     (6,100)\ncitymindist         *0      (0,"...
        arg = 
"t\0\0\0Á\n\0\0\a\016\f\b\fãÿ\0\0\035\005\tÌ\002\020\021\027\nú\006\003\n\001\0\0\0\017\0\021\027\0\0\0\0\0\0\0j\a\bðÛ\017\bÆ\r\f\b0ãÿ¿°ãÿ¿1\0\0\0>\0\0\0Èóÿ¿Ñ\020\005\b°ãÿ¿\0\020\0\0Èóÿ¿\002\021\005\bXß\017\b\003\0\0\0Hãÿ¿\003á\b\bØW\035\bàãÿ¿\003\0\0\0Xß\017\bOption
      
Xß\017\b\003\0\0\0àãÿ¿xãÿ¿Wá\b\bXß\017\bàãÿ¿\003\0\0\0°ãÿ¿1\0\0\0\0\0\0\0Èóÿ¿Xß\017\bXß\017\bXß\017\b"...
        allargs = "t\01000)\nsavepalace          *1      (0,1)\nnatura 
áÿ¿ áÿ¿ áÿ¿bÞ\b\b áÿ¿\035\0\0\08âÿ¿pß\b\bèÛ\017\bÅöf\b\0\0\0\0¨öf\b\030áÿ¿Åöf\b",
 '\0' <repeats 136 times>, " ", '\0' <repeats 127 times>, 
"\035\0\0\0Àâÿ¿Xâÿ¿ÀÛ\017\b\0\0\0\0\035\0\0\0Xâÿ¿¨ß\b\bÀÛ\017\bØ 
\\\b\0\0\0\0¨öf\b¨öf\bÀÛ\017\b\210âÿ¿õW\t\bÀÛ\017\bÀâÿ¿\035\0\0"...
        cptr_s = 0x0
        cptr_d = 0x80fdf58 "\003"
        i = 0
        cmd = CMD_DEAD
#4  0x0806ac5e in handle_chat_msg (pconn=0x80fdf58, packet=0x81c4528)
    at handchat.c:180
        genmsg = {
  message = "Ôs\v\b0000øíÿ¿LT\n\bP8%\b@îÿ¿", '\0' <repeats 12 times>, 
"\f\0\0\0@îÿ¿È6\e\b@îÿ¿¸®-\b\030îÿ¿ÜV\n\bÈ6\e\b@îÿ¿\f\0\0\0\0\0\0\0¸®-\b/\0\0\08îÿ¿¿\035\t\bÈ6\e\b@îÿ¿Xîÿ¿LT\n\b\210C%\b\0\0\0\0Xîÿ¿\"á\t\b\221\001\0\0ôóÿ¿\0\0\0\0\001\0\0\0¨óÿ¿¸®-\b\210îÿ¿\224²\b\b\020I\023\b\221\001\0\0\210îÿ¿ô¡\b\bPïÿ¿\n\0\0\0¨îÿ¿Á¶\004\bPïÿ¿Èîÿ¿¸î"...,
 x = -1, y = -1, event = -1}
        sender_name = "bservatory in London (-10 
remaining).\00000000000\0ß\017\b\0\0\0\b\0\0\0\0\206\e\f@0000000000"
        cp = 0x81c452c ""
#5  0x0804d45e in handle_packet_input (pconn=0x80fdf58, packet=0x81c4528, 
    type=16) at srv_main.c:770
        pconn = (struct connection *) 0x0
        packet = (void *) 0x81c4528
        type = 16
        pplayer = (struct player *) 0x8131788
#6  0x08084d9c in sniff_packets () at sernet.c:573
        command_ok = 136070440
        packet = (void *) 0x81c4528
        type = PACKET_CHAT_MSG
        result = 1
        i = 30
        max_desc = 920
        readfs = {__fds_bits = {64, 0 <repeats 31 times>}}
        writefs = {__fds_bits = {0 <repeats 32 times>}}
        exceptfs = {__fds_bits = {0 <repeats 32 times>}}
        tv = {tv_sec = 0, tv_usec = 930000}
        year = 1140
#7  0x0804ebb9 in main_loop () at srv_main.c:1798
[... 14 lines skipped ...]
        eot_timer = (struct timer *) 0x8268f28
        save_counter = 1
#8  0x0804f1e0 in srv_main () at srv_main.c:2090
        i = 0
#9  0x08049b31 in main (argc=10, argv=0xbffff8d4) at civserver.c:153
        argc = 10
        argv = (char **) 0xbffff8d4
        inx = 10
        showhelp = 0
        showvers = 0
        option = 0x656d614e <Address 0x656d614e out of bounds>
#10 0x400651c4 in __libc_start_main () from /lib/libc.so.6
No symbol table info available.
(gdb)