Re: CList segfault

[Owen Taylor <otaylor redhat com>]

Daniel Elstner <daniel elstner gmx net> writes:

> Hello,
> 
> I have some problems with GtkCList in extended selection mode,
> reproduceable with the following steps:
> 
> 1. The user selects some rows _including_ the last one.
> 2. The program will call gtk_clist_remove() for each selected row.
> 3. The user changes the selection via mouse clicks before
>    all rows are removed.

I don't understand here - 2. happens all at once, doesn't it?
How can the user change the selection while this is going on?
 
> Then you will get a segfault in resync_selection(), gtk_clist.c:3980.
> It seems g_list_nth() is called with a row number exceeding the
> list length, and returns a NULL pointer which will be
> dereferenced immediately.
> I tried tracking down the problem but I don't know anything about
> the internal GtkCList stuff, especially the purpose of the
> undo_selection list. Simply checking for NULL didn't help much
> and triggered even worse errors just a little bit later.

Well, if you provide a test case, somebody could take a look.

Regards,
                                        Owen