------- Comment #1 from pinskia at gcc dot gnu dot org  2005-12-28 16:37 -------
gfc_build_st_parameter is the cause:
  len = strlen (st_parameter[ptype].name);
  gcc_assert (len <= sizeof (name) - sizeof ("__st_parameter_"));
  memcpy (name, "__st_parameter_", sizeof ("__st_parameter_"));
  memcpy (name + sizeof ("__st_parameter_") - 1, st_parameter[ptype].name,
          len);

name is not NUL terminated as len does not contain the NUL character in
st_parameter[ptype].name.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jakub at gcc dot gnu dot org
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
           Keywords|                            |ice-on-valid-code
   Last reconfirmed|0000-00-00 00:00:00         |2005-12-28 16:37:18
               date|                            |
            Summary|Garbage in output of -fdump-|[4.1/4.2 Regression] Garbage
                   |tree-original               |in output of -fdump-tree-
                   |                            |original
   Target Milestone|---                         |4.1.0
            Version|4.2.0                       |4.1.0


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=25587

Reply via email to