[Xcircuit-dev] reference counter + segfault in 3.4.29

[Wim Vereecken]

Hi Tim,

In the current stable version (3.4.29), the reference counter of the 
source image is not updated after a graphics object is copied.
(file events.c, function graphiccopy() ).

This results in a segmentation fault from the moment that one of the 
users of this image source is deleted. The memory of the source image 
data is freed, which leaves the remaining users with a pointer to 
invalid memory.

In version 3.6.137, the reference counter is correctly updated so the 
problem does not exist there.

A patch for the current stable version in CVS (3.4.29) is available at
http://homes.esat.kuleuven.be/~wvereeck/matgen/patch_3.4.29_graphics
(created at the top-level xcircuit-3.4/ dir)

Kind regards,
Wim

--
Wim Vereecken
Analog/RF IC Design Engineer
KULeuven, Dept. ESAT-MICAS
Kasteelpark Arenberg 10
B-3001 Leuven
Belgium
Tel. +32 16 321070
FAX  +32 16 321975
http://www.esat.kuleuven.be/~wvereeck

Disclaimer: http://www.kuleuven.be/cwis/email_disclaimer.htm