Package: vnc4server
Version: 4.1.1+X4.3.0-21
Severity: normal

Steps to reproduce:
1) vnc4server :9 -depth 24 -geometry 1024x768
2) xvnc4viewer localhost:9
3) press F8, disable "auto select" and set hextile with 256 colors
4) apt-get install freecol in a debian unstable chroot
5) wget http://iki.fi/lindi/freecol/lindi_Hollanti_1639_2_syksy.fsg
6) start freecol inside chroot so that it talks to vnc4server outside chroot
7) load the savegame
8) choose "show grid" from the view menu

Expected results:
8) grid of the map is shown

Actual results:
8) vnc4server segfaults.

More info:
1) gdb shows the following backtrace:

Program received signal SIGSEGV, Segmentation fault.
0x080d30d0 in cfb32ClippedLineCopy ()
(gdb) bt
#0  0x080d30d0 in cfb32ClippedLineCopy ()
#1  0x080d2c73 in cfb32LineSS1Rect ()
#2  0x08066d5f in ProcPolyLine ()
#3  0x08069b39 in Dispatch ()
#4  0x080507d9 in main ()
(gdb) x/16i $eip
0x80d30d0 <cfb32ClippedLineCopy+704>:   mov    %esi,(%ecx)
0x80d30d2 <cfb32ClippedLineCopy+706>:   lea    0x0(%esi),%esi
0x80d30d9 <cfb32ClippedLineCopy+713>:   lea    0x0(%edi),%edi
0x80d30e0 <cfb32ClippedLineCopy+720>:   add    $0xbc,%esp
0x80d30e6 <cfb32ClippedLineCopy+726>:   pop    %ebx
0x80d30e7 <cfb32ClippedLineCopy+727>:   pop    %esi
0x80d30e8 <cfb32ClippedLineCopy+728>:   pop    %edi
0x80d30e9 <cfb32ClippedLineCopy+729>:   pop    %ebp
0x80d30ea <cfb32ClippedLineCopy+730>:   ret
0x80d30eb <cfb32ClippedLineCopy+731>:   nop
0x80d30ec <cfb32ClippedLineCopy+732>:   lea    0x0(%esi),%esi
0x80d30f0 <cfb32ClippedLineCopy+736>:   mov    0x20(%ebp),%ecx
0x80d30f3 <cfb32ClippedLineCopy+739>:   movswl 0x6(%ecx),%eax
0x80d30f7 <cfb32ClippedLineCopy+743>:   cmp    %eax,%edx
0x80d30f9 <cfb32ClippedLineCopy+745>:   jl     0x80d2eea 
<cfb32ClippedLineCopy+218>
0x80d30ff <cfb32ClippedLineCopy+751>:   or     $0x1,%ebx
(gdb) info locals
No symbol table info available.
(gdb) p $esi
$1 = 0
(gdb) p $ecx
$2 = -1228378108
(gdb) p/x $ecx
$3 = 0xb6c87004
(gdb) shell cat /proc/10470/maps
08048000-083fe000 r-xp 00000000 09:00 1979148    /usr/bin/Xvnc4
083fe000-08438000 rw-p 003b5000 09:00 1979148    /usr/bin/Xvnc4
08438000-089a0000 rw-p 08438000 00:00 0          [heap]
b6c88000-b6f88000 rw-s 00000000 00:08 962101249  /SYSV00000000 (deleted)
b6f88000-b7289000 rw-p b6f88000 00:00 0
b73ea000-b743c000 rw-p b73ea000 00:00 0
b743c000-b7d40000 rw-p b743c000 00:00 0
b7d40000-b7e67000 r-xp 00000000 09:00 1850491    
/lib/tls/i686/cmov/libc-2.3.6.so
b7e67000-b7e6c000 r--p 00127000 09:00 1850491    
/lib/tls/i686/cmov/libc-2.3.6.so
b7e6c000-b7e6e000 rw-p 0012c000 09:00 1850491    
/lib/tls/i686/cmov/libc-2.3.6.so
b7e6e000-b7e71000 rw-p b7e6e000 00:00 0
b7e71000-b7e7b000 r-xp 00000000 09:00 1848092    /lib/libgcc_s.so.1
b7e7b000-b7e7c000 rw-p 00009000 09:00 1848092    /lib/libgcc_s.so.1
b7e7c000-b7e9f000 r-xp 00000000 09:00 1850495    
/lib/tls/i686/cmov/libm-2.3.6.so
b7e9f000-b7ea1000 rw-p 00022000 09:00 1850495    
/lib/tls/i686/cmov/libm-2.3.6.so
b7ea1000-b7ea2000 rw-p b7ea1000 00:00 0
b7ea2000-b7f7c000 r-xp 00000000 09:00 2083392    /usr/lib/libstdc++.so.6.0.8
b7f7c000-b7f7f000 r--p 000d9000 09:00 2083392    /usr/lib/libstdc++.so.6.0.8
b7f7f000-b7f81000 rw-p 000dc000 09:00 2083392    /usr/lib/libstdc++.so.6.0.8
b7f81000-b7f87000 rw-p b7f81000 00:00 0
b7f87000-b7f9a000 r-xp 00000000 09:00 2083551    /usr/lib/libz.so.1.2.3
b7f9a000-b7f9b000 rw-p 00012000 09:00 2083551    /usr/lib/libz.so.1.2.3
b7fb0000-b7fb8000 rw-s 00000000 00:08 964132867  /SYSV00000000 (deleted)
b7fb8000-b7fba000 rw-p b7fb8000 00:00 0
b7fba000-b7fbb000 r-xp b7fba000 00:00 0          [vdso]
b7fbb000-b7fd0000 r-xp 00000000 09:00 1848069    /lib/ld-2.3.6.so
b7fd0000-b7fd2000 rw-p 00014000 09:00 1848069    /lib/ld-2.3.6.so
bfea5000-bfeba000 rw-p bfea5000 00:00 0          [stack]

2) I can reproduce this issue also with vnc4server 4.1.1+X4.3.0-30 in debian 
unstable.

3) Please let me know if you are unable to reproduce this issue!



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to