Subject: Re: define-prefix-command with a name, pressing key sequence bound to it results in memory corruption

From: Chong Yidong <[email-masked]>
Date: Sat, 25 Oct 2008 16:25:14 -0400

Chong Yidong <[email-masked]> writes:

> I can reproduce this.
>
> It's strange that realloc fails.  If you replacing the xrealloc in
> enlarge_buffer_text with xmalloc/bcopy/xfree, Emacs crashes at the call
> to malloc.
>
> Anyone have an idea what causes this?

Found the bug: a bad strcpy in read_char_minibuf_menu_prompt.  I've
checked in a fix.