For the record.

I finally found and fixed a bug introduced in the text{} object code 
during v3.8 code development. It was occasionally(*) causing segment 
faults / invalid memory accesses.

The code was part of the code backed out late for the v3.8 beta releases 
- so our two v3.8 beta releases are OK. Official v3.8 releases prior to 
those two are likely exposed to the bug.

The bug still exists in POV-Ray's master 4.0 branch code.

The v3.8 yuqk fork will be fixed in the upcoming R19 release.

In truetype.cpp and the function ProcessCharMap(), change the line:

     for(j = 0; j <= ffile->info->cmapSelector.size(); ++j)
to
     for(j = 0; j <  ffile->info->cmapSelector.size(); ++j)

Bill P.

(*) - Only crashing for me on the order of 1/1000 text{} object 
creations with a few fonts; while much less - or apparently not at all 
with other fonts.

Post a reply to this message