> Hmm, and can you see "both ends" of tgath_buf and buf (in particular
> tgath_but[curr_len - 1] and buf[curr_len-1])?
(dbx) p tgath_buf[curr_len - 1]
tgath_buf[curr_len-1] = '\0'
(dbx) p buf[curr_len-1]
dbx: cannot access address 0x9f7f6ff
(dbx) p tgath_buf[curr_len - 2]
tgath_buf[curr_len-2] =
Peter,
Thanks for the hints.
> 2 things caught my eye (except that their "R code" is clearly C): The
> dbx output doesn't show off[curr_seq], which could actually be the
> culprit,
(dbx) p off[curr_seq]
off[curr_seq] = 0
> and the _memcpy call on the stack looks odd:
>
> _memcpy(0x0, 0xfdeb
