After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 363254 - [PATCH] aisleriot crashes when clicking on a card
[PATCH] aisleriot crashes when clicking on a card
Status: RESOLVED FIXED
Product: gnome-games-superseded
Classification: Deprecated
Component: general
2.16.x
Other All
: Normal critical
: ---
Assigned To: GNOME Games maintainers
GNOME Games maintainers
Depends on:
Blocks:
 
 
Reported: 2006-10-18 21:54 UTC by Joe Marcus Clarke
Modified: 2012-01-31 23:29 UTC
See Also:
GNOME target: ---
GNOME version: 2.15/2.16


Attachments
Fix user-after-free problems in aisleriot (627 bytes, patch)
2006-10-18 21:54 UTC, Joe Marcus Clarke
none Details | Review

Description Joe Marcus Clarke 2006-10-18 21:54:21 UTC
Steps to reproduce:
1. Start aisleriot
2. Click on any card
3. 


Stack trace:
  • #0 kill
    at kill.S line 2
  • #1 _raise
    at /usr/src/lib/libpthread/thread/thr_raise.c line 47
  • #2 abort
    at /usr/src/lib/libc/stdlib/abort.c line 69
  • #3 scm_gc_unprotect_object
    at gc.c line 2598
  • #4 cscmi_drop_valid
    at cscmi.c line 702
  • #5 cards_are_droppable
    at events.c line 84
  • #6 find_drop_target
    at events.c line 99
  • #7 motion_notify_event
    at events.c line 430
  • #8 _gtk_marshal_BOOLEAN__BOXED
    at gtkmarshalers.c line 84
  • #9 IA__g_closure_invoke
    at gclosure.c line 490
  • #10 signal_emit_unlocked_R
    at gsignal.c line 2440
  • #11 IA__g_signal_emit_valist


Other information:
There are two user-after-free problems in cscmi.c.  Attached is a patch that corrects both.
Comment 1 Joe Marcus Clarke 2006-10-18 21:54:54 UTC
Created attachment 74977 [details] [review]
Fix user-after-free problems in aisleriot
Comment 2 Andreas Røsdal 2006-10-28 17:15:14 UTC
Thanks for the patch, it was applied to both CVS HEAD and the 2.16 branch.
Comment 3 Robert Ancell 2012-01-31 23:29:58 UTC
This bug is being reassigned to the "general" component so we can close the aisleriot bugzilla component.  Apologies for the mass email!