Bug#797363: vcmi: Segfault when buying spellbook

[Johannes Schauer]

Hi,

Quoting Nils Dagsson Moskopp (2015-08-30 01:35:40)
> in the attached VCMI save game, I moved the hero near the city to the city.
> I then bought a spell building and tried to buy a spellbook for the hero.
> 
> The game crashed. I can reproduce this using the attached save game.
> I expected to be able to buy a spellbook without the game crashing.

naturally ;)

I can also confirm your crash...

> For the three last crashes, dmesg output contained this:
> > [295408.187181] CClient::run[31691]: segfault at 0 ip b7148f28 sp a72fdfe0 error 4 in libvcmi.so[b6d7c000+670000]
> > [295456.345553] CClient::run[31743]: segfault at 18 ip b70ebf28 sp a72fdfe0 error 4 in libvcmi.so[b6d1f000+670000]
> > [295580.068376] CClient::run[31840]: segfault at 0 ip b70fff28 sp a72fdfe0 error 4 in libvcmi.so[b6d33000+670000]

and was able to get a more meaningful backtrace:

Core was generated by `/usr/games/vcmiclient'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  PutArtifact::applyGs (this=this at entry=0x7fb070b2c2c0, gs=gs at entry=0x7fb07f472ae0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/lib/NetPacksLib.cpp:901
901		art->putAt(al);
(gdb) bt
#0  PutArtifact::applyGs (this=this at entry=0x7fb070b2c2c0, gs=gs at entry=0x7fb07f472ae0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/lib/NetPacksLib.cpp:901
#1  0x00007fb0a6c4b3ef in CApplyOnGS<PutArtifact>::applyOnGS (this=<optimized out>, gs=0x7fb07f472ae0, pack=0x7fb070b2c2c0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/lib/CGameState.cpp:71
#2  0x00007fb0a6c04998 in CGameState::apply (this=0x7fb07f472ae0, pack=pack at entry=0x7fb070b2c2c0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/lib/CGameState.cpp:2164
#3  0x00007fb0a74fbc56 in CClient::handlePack (this=this at entry=0x7fb07ef998e0, pack=0x7fb070b2c2c0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/client/Client.cpp:649
#4  0x00007fb0a74fc038 in CClient::run (this=0x7fb07ef998e0) at /build/vcmi-t5ndlM/vcmi-0.98+dfsg/client/Client.cpp:176
#5  0x00007fb0a5cdeaea in ?? () from /usr/lib/x86_64-linux-gnu/libboost_thread.so.1.55.0
#6  0x00007fb0a5abc0a4 in start_thread (arg=0x7fb082da5700) at pthread_create.c:309
#7  0x00007fb0a221d07d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111


would you mind forwarding this problem to upstreams bugtracker at
http://bugs.vcmi.eu ?

Thanks!

cheers, josch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-games-devel/attachments/20150830/e430188c/attachment-0001.sig>