[rt.cpan.org #76824] [perl #112608] panic: sv_setpvn called withnegative strlen -1

<URL: https://rt.cpan.org/Ticket/Display.html?id=76824 >

Problem is still there also with blead perl. No crash or sv_setpvn panic anymore but valgrind show this error message:

==17627== Conditional jump or move depends on uninitialised value(s)
==17627==    at 0x51E0AA: Perl_utf8n_to_uvchr (utf8.c:858)
==17627==    by 0x663CA14: encode_method (Encode.xs:193)
==17627==    by 0x663CCF9: XS_Encode__XS_encode (Encode.xs:785)

Problem is again in this code from Encode.xs:

        STRLEN clen;
        UV ch =
            utf8n_to_uvuni(s+slen, (SvCUR(src)-slen),
                   &clen, UTF8_ALLOW_ANY|UTF8_CHECK_ONLY);

I suspect that (SvCUR(src)-slen) is really incorrect and something like (tlen-sdone-slen) should be passed.

IIRC s is pointer to first C char which is not yet processed in dst, slen is number of characters processed by last do_encode() call (in case of problems it can be just one or zero) and SvCUR(src) is length of original input string. (tlen-sdone) should be number of remaining characters in src, not processed in dst.

With change (SvCUR(src)-slen) to (tlen-sdone-slen) valgrind does not show error message anymore...

CCing khw, can you recheck this?

• [perl #112608] panic: sv_setpvn called with negative strlen -1 by Steve Hay
• Re: [perl #112608] panic: sv_setpvn called with negative strlen -1 by Leon Timmermans
• Re: [perl #112608] panic: sv_setpvn called with negative strlen -1 by Karl Williamson
• [perl #112608] panic: sv_setpvn called with negative strlen -1 by Father Chrysostomos via RT
• RE: [perl #112608] panic: sv_setpvn called with negative strlen -1 by Steve Hay
• RE: [perl #112608] panic: sv_setpvn called with negative strlen -1 by Steve Hay
• [perl #112608] panic: sv_setpvn called with negative strlen -1 by Steve Hay via RT
• [perl #112608] panic: sv_setpvn called with negative strlen -1 by Father Chrysostomos via RT
• [perl #112608] panic: sv_setpvn called with negative strlen -1 by Father Chrysostomos via RT
• [rt.cpan.org #76824] [perl #112608] panic: sv_setpvn called withnegative strlen -1 by Pali via RT