DWB tbl bug!! HELP

[I.A.Utting]

In article <121 at mm730.uq.OZ> probe at mm730.UUCP writes:
>The problem arises when something scribbles 4 bytes into the input
>buffer of (FILE *)tabin.
>It occurs during the call to frearr() after the first table finishes printing
>when the alloc'd memory is freed.
>I think the problem is caused by the allocation at line 291 of t4.c
>in routine garray() and the problem seems to have gone away by increasing
>the allocation to 'sep' by one int.:
>	sep = (int *) getcore(qcol+2, sizeof(int));
>	sep++; /* sep[-1] must be legal */
> ....

Although we don't use DWB tbl, I've fixed this problem in the early-ditroff
version we do use, the problem might be the same.

Check out the code that frees sep. I guess you'll find that it does just
that. It should of course free --sep. This is an EXTREMELY DIRTY FIX. Use
your imagination to make it tidier.

		Ian Utting	iau at ukc.uucp