1
66%
master: 54%

Ran 17 Jul 2017 12:24PM UTC

Files 65

Run time 2s

Badge

Embed ▾

Committed 17 Jul 2017 12:15PM UTC coverage: 66.352%. Remained the same

Job # 22.1

Build Type

push

travis-ci

Committed by

coldfix

Commit Message

Fix growth of zero-length arrays

In many places the `grow_XXX_array` functions are used to allocate an
additional array element directly before writing into the supposedly
allocated array index without further range-checks.

Now, if an array was initialized to zero length it was never grown,
meaning that we would write after the end of the allocated buffer.

This just caught me with the `select->at` parameter which has to have
zero length by default (as defined in mad_dict.c). If you specify one or
two values for `at`, everything *seemed* to work as expected. However,
`decode_par` did not properly grow the double array and was writing the
values after the end of the buffer. When specifying a third argument,
the problem manifested by writing a NUL into the first byte of the
`flag` buffer and hence not anymore executing any selection routine.

Run Details

11895 of 17927 relevant lines covered (66.35%)

807755.89 hits per line

hibtc / MAD-X / 22 / 1
66%
master: 54%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22.1

hibtc / MAD-X / 22 / 1 66% master: 54%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22.1

hibtc / MAD-X / 22 / 1
66%
master: 54%

README BADGES
x