From 37d418957ce613334863f491212198567ff1cd57 Mon Sep 17 00:00:00 2001
From: zelgadis <zelgadis@c06c8d41-db1a-0410-9941-cceddc491573>
Date: Fri, 7 Dec 2007 06:31:37 +0000
Subject: The copy operator for CrawlStoreValue was copying the value of the
 val.ptr pointer, rather than copying the object that the pointer referenced;
 this could potentially lead to freed memory being referenced or to memory
 being freed twice.  This will hopefully fix some CrawlStore related
 assertions caused by randarts.

git-svn-id: https://crawl-ref.svn.sourceforge.net/svnroot/crawl-ref/trunk@3015 c06c8d41-db1a-0410-9941-cceddc491573
---
 crawl-ref/source/store.cc | 50 ++++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 47 insertions(+), 3 deletions(-)

(limited to 'crawl-ref/source/store.cc')

diff --git a/crawl-ref/source/store.cc b/crawl-ref/source/store.cc
index 0ffa96e194..c3154b0dc8 100644
--- a/crawl-ref/source/store.cc
+++ b/crawl-ref/source/store.cc
@@ -259,7 +259,15 @@ void CrawlStoreValue::unset(bool force)
     flags |= SFLAG_UNSET;
 }
 
-// Only needed to do some assertion checking.
+#define COPY_PTR(ptr_type) \
+    { \
+        ptr_type *ptr = static_cast<ptr_type*>(val.ptr); \
+        if (ptr != NULL) \
+            delete ptr; \
+        ptr = static_cast<ptr_type*>(other.val.ptr); \
+        val.ptr = (void*) new ptr_type (*ptr);  \
+    }
+
 CrawlStoreValue &CrawlStoreValue::operator = (const CrawlStoreValue &other)
 {
     ASSERT(other.type >= SV_NONE && other.type < NUM_STORE_VAL_TYPES);
@@ -267,7 +275,6 @@ CrawlStoreValue &CrawlStoreValue::operator = (const CrawlStoreValue &other)
 
     // NOTE: We don't bother checking SFLAG_CONST_VAL, since the
     // asignment operator is used when swapping two elements.
-
     if (!(flags & SFLAG_UNSET))
     {
         if (flags & SFLAG_CONST_TYPE)
@@ -276,7 +283,44 @@ CrawlStoreValue &CrawlStoreValue::operator = (const CrawlStoreValue &other)
 
     type  = other.type;
     flags = other.flags;
-    val   = other.val;
+
+    switch(type)
+    {
+    case SV_NONE:
+        break;
+
+    case SV_BOOL:
+    case SV_BYTE:
+    case SV_SHORT:
+    case SV_LONG:
+    case SV_FLOAT:
+        val = other.val;
+        break;
+
+    case SV_STR:
+        COPY_PTR(std::string);
+        break;
+
+    case SV_COORD:
+        COPY_PTR(coord_def);
+        break;
+
+    case SV_ITEM:
+        COPY_PTR(item_def);
+        break;
+
+    case SV_HASH:
+        COPY_PTR(CrawlHashTable);
+        break;
+
+    case SV_VEC:
+        COPY_PTR(CrawlVector);
+        break;
+
+    case NUM_STORE_VAL_TYPES:
+        DEBUGSTR("CrawlStoreValue has type NUM_STORE_VAL_TYPES");
+        break;
+    }
 
     return (*this);
 }
-- 
cgit v1.2.3-54-g00ecf