Send this page to somebody

pgserver crash in pgstring/textbox code

This bug manifests itself as a segfault during a memmove() call. You can cause it by opening Nifty and typing something into the minibuffer that generates an exception, like "boing". memmove() is being caleld from pgstring_insert_char(), with a negative length parameter. The pgstr_iterator passed to pgstring_insert_char() is invalid. (p->invalid==1 and p->offset is 1 whereas the string is empty) I have a hunch this was caused by the textbox widget recently switching its default encoding from ascii to UTF-8.