aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJan Kratochvil <jan.kratochvil@redhat.com>2008-12-22 13:19:30 +0000
committerJan Kratochvil <jan.kratochvil@redhat.com>2008-12-22 13:19:30 +0000
commit6f4de6c97dfed92a46f3cd2d7d841b79da58ac81 (patch)
treeb060aea3209750b7566b8e5a00106f2c40460f05
parent567e1b4ec8fc6ef29e662987c5314f4cdb4bf287 (diff)
downloadgdb-6f4de6c97dfed92a46f3cd2d7d841b79da58ac81.zip
gdb-6f4de6c97dfed92a46f3cd2d7d841b79da58ac81.tar.gz
gdb-6f4de6c97dfed92a46f3cd2d7d841b79da58ac81.tar.bz2
gdb/
Fix memory double-free. * completer.c (line_completion_function): Clear LIST after called xfree. gdb/testsuite/ * gdb.base/completion.exp (Completing non-existing component): New test.
-rw-r--r--gdb/ChangeLog7
-rw-r--r--gdb/completer.c4
-rw-r--r--gdb/testsuite/ChangeLog4
-rw-r--r--gdb/testsuite/gdb.base/completion.exp18
4 files changed, 31 insertions, 2 deletions
diff --git a/gdb/ChangeLog b/gdb/ChangeLog
index 6b067ea..2a0a8c4 100644
--- a/gdb/ChangeLog
+++ b/gdb/ChangeLog
@@ -1,4 +1,9 @@
-2008-12-22 Joel Brobecker <brobecker@adacore.com>
+2008-12-22 Jan Kratochvil <jan.kratochvil@redhat.com>
+
+ Fix memory double-free.
+ * completer.c (line_completion_function): Clear LIST after called xfree.
+
+2008-12-22 Joel Brobecker <brobecker@adacore.com>
* breakpoint.c (update_watchpoint): Adjust and extend the description
of this function. Fix one error message accordingly.
diff --git a/gdb/completer.c b/gdb/completer.c
index d109140..4747a42 100644
--- a/gdb/completer.c
+++ b/gdb/completer.c
@@ -752,8 +752,10 @@ line_completion_function (const char *text, int matches,
if (list)
{
/* Free the storage used by LIST, but not by the strings inside.
- This is because rl_complete_internal () frees the strings. */
+ This is because rl_complete_internal () frees the strings.
+ As complete_line may abort by calling `error' clear LIST now. */
xfree (list);
+ list = NULL;
}
index = 0;
list = complete_line (text, line_buffer, point);
diff --git a/gdb/testsuite/ChangeLog b/gdb/testsuite/ChangeLog
index efa6234..d5ae448 100644
--- a/gdb/testsuite/ChangeLog
+++ b/gdb/testsuite/ChangeLog
@@ -1,3 +1,7 @@
+2008-12-22 Jan Kratochvil <jan.kratochvil@redhat.com>
+
+ * gdb.base/completion.exp (Completing non-existing component): New test.
+
2008-12-21 Jan Kratochvil <jan.kratochvil@redhat.com>
Fix for PR gdb/8648.
diff --git a/gdb/testsuite/gdb.base/completion.exp b/gdb/testsuite/gdb.base/completion.exp
index d0d0dd6..2d94fca 100644
--- a/gdb/testsuite/gdb.base/completion.exp
+++ b/gdb/testsuite/gdb.base/completion.exp
@@ -805,6 +805,24 @@ gdb_expect {
timeout { fail "(timeout) complete 'set follow-fork-mode'" }
}
+send_gdb "p values\[0\].nonex.\t"
+gdb_expect {
+ -re "Type struct some_struct has no component named nonex.\r\n$gdb_prompt $"\
+ { pass "Completing non-existing component" }
+ -re ".*$gdb_prompt $" { fail "Completing non-existing component" }
+ timeout { fail "(timeout) Completing non-existing component" }
+ eof { fail "(eof) Completing non-existing component #2" }
+ }
+# Double memory freeing gets found only on the second run:
+send_gdb "p values\[0\].nonex.\t"
+gdb_expect {
+ -re "Type struct some_struct has no component named nonex.\r\n$gdb_prompt $"\
+ { pass "Completing non-existing component #2" }
+ -re ".*$gdb_prompt $" { fail "Completing non-existing component #2" }
+ timeout { fail "(timeout) Completing non-existing component #2" }
+ eof { fail "(eof) Completing non-existing component #2" }
+ }
+
# Restore globals modified in this test...
if [info exists old_inputrc] {
set env(INPUTRC) $old_inputrc