ken@gvax.cs.cornell.edu (Ken Birman) (12/09/89)
Thanks to Mark Laubach at HP Labs for pinning down the following problem. In cmd.c, free is bring called from the "list" command with a bad pointer (a pointer is allocated and then gets incremented prior to calling free). Here's the patch to cmd.c: 453c453 < gl_desc *glp; --- > gl_desc *glp, *tlp; 472c472 < glp = pg_list(arg); --- > tlp = glp = pg_list(arg); 490c490 < free((char *)glp); --- > free((char *)tlp);