Fix a crash of I-search in a bidi-reordered buffer.

 bidi.c (bidi_cache_iterator_state): Invalidate the cache if we
 are outside the range of cached character positions.

diff --git a/src/ChangeLog b/src/ChangeLog
index 7809565de877255b6dec94c47bc8c5d52ef934df..44c55252b6233746163b766e0245c07b42b589ca 100644 (file)
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,8 @@
+2010-03-30  Eli Zaretskii  <eliz@gnu.org>
+
+       * bidi.c (bidi_cache_iterator_state): Invalidate the cache if we
+       are outside the range of cached character positions.
+
 2010-03-30  Juanma Barranquero  <lekktu@gmail.com>
 
        * makefile.w32-in ($(BLD)/bidi.$(O)): Add dependency on w32gui.h.

diff --git a/src/bidi.c b/src/bidi.c
index d5e28cd2d8a217779eba3136b3e854d86c9dc199..ea47cd33fecf97e9d0e6ed11bf36a2681ed940da 100644 (file)
--- a/src/bidi.c
+++ b/src/bidi.c
@@ -671,10 +671,16 @@ bidi_cache_iterator_state (struct bidi_it *bidi_it, int resolved)
       /* Don't overrun the cache limit.  */
       if (idx > sizeof (bidi_cache) / sizeof (bidi_cache[0]) - 1)
        abort ();
-      /* Don't violate cache integrity: character positions should
-        correspond to cache positions 1:1.  */
-      if (idx > 0 && bidi_it->charpos != bidi_cache[idx - 1].charpos + 1)
-       abort ();
+      /* Character positions should correspond to cache positions 1:1.
+        If we are outside the range of cached positions, the cache is
+        useless and must be reset.  */
+      if (idx > 0 &&
+         (bidi_it->charpos > bidi_cache[idx - 1].charpos + 1
+          || bidi_it->charpos < bidi_cache[0].charpos))
+       {
+         bidi_cache_reset ();
+         idx = 0;
+       }
       bidi_copy_it (&bidi_cache[idx], bidi_it);
       if (!resolved)
        bidi_cache[idx].resolved_level = -1;