Ryzom

1. uname -a
   Linux yuuko.site 2.6.38-27-desktop #1 SMP PREEMPT 2011-03-21 19:56:38 +0100 x86_64 x86_64 x86_64 GNU/Linux

Always reproducible here.
Steps:
- Add a main character
- Add other characters linked to the previous one
- Move the whole linked group

This seems enough to trigger the crash.

(If needed, I can rebuild in debug mode)

(gdb) bt

Program received signal SIGSEGV, Segmentation fault.
0x0000000000e21f6b in M_erase_node (_b=0x283e6470, _p=0x29182f10, this=<optimized out>) at /usr/include/c++/4.5/tr1/hashtable.h:958
958 __next = __cur->_M_next;
(gdb) bt
#0 0x0000000000e21f6b in _M_erase_node (_b=0x283e6470, _p=0x29182f10, this=<optimized out>) at /usr/include/c++/4.5/tr1/hashtable.h:958
#1 erase (_it=<optimized out>, this=<optimized out>) at /usr/include/c++/4.5/tr1/hashtable.h:1001
#2 R2::CEditor::CSortedInstances::remove (this=0x29180f00, inst=<optimized out>) at /devel/ryzom/code/ryzom/client/src/r2/editor.cpp:6885
#3 0x0000000000e220a7 in R2::CEditor::unregisterInstanceDispName (this=0x49f60e0, inst=0x29b70ad0) at /devel/ryzom/code/ryzom/client/src/r2/editor.cpp:6946
#4 0x0000000000ddfce7 in R2::CInstance::onErase (this=0x29b70ad0) at /devel/ryzom/code/ryzom/client/src/r2/instance.cpp:297
#5 0x0000000000e35172 in R2::CEditor::onErase (this=0x49f60e0, root=0x2882a510, foundInBase=@0x7fffffffa916, nameInParent=...) at /devel/ryzom/code/ryzom/client/src/r2/editor.cpp:5076
#6 0x0000000000e3700c in onErase (object=0x2882a510, this=0x49f60e0) at /devel/ryzom/code/ryzom/client/src/r2/editor.cpp:5006
#7 R2::CEditor::nodeSet (this=0x49f60e0, instanceId=..., attrName=..., value=0x28389dd0) at /devel/ryzom/code/ryzom/client/src/r2/editor.cpp:5616
#8 0x0000000000e4e79c in R2::CActionHistoric::CRequestSetNode::redo (this=0x2e19fa40, dmc=0x7fffffffaa30, scenario=...) at /devel/ryzom/code/ryzom/client/src/r2/dmc/action_historic.cpp:498
#9 0x0000000000e4ec18 in R2::CActionHistoric::CAction::flush (this=0x2daf1270, dmc=0x7fffffffaa30, scenario=...) at /devel/ryzom/code/ryzom/client/src/r2/dmc/action_historic.cpp:399
#10 0x0000000000e4f987 in R2::CActionHistoric::endAction (this=0x14fc1810) at /devel/ryzom/code/ryzom/client/src/r2/dmc/action_historic.cpp:150
#11 0x0000000000e5d0e4 in flush (this=0x14fc1800) at /devel/ryzom/code/ryzom/client/src/r2/dmc/dmc.cpp:182
#12 R2::CDynamicMapClient::flushActions (this=<optimized out>) at /devel/ryzom/code/ryzom/client/src/r2/dmc/dmc.cpp:882
#13 0x0000000000939ea4 in mainLoop () at /devel/ryzom/code/ryzom/client/src/main_loop.cpp:1634
#14 0x0000000000856027 in main (argc=<optimized out>, argv=<optimized out>) at /devel/ryzom/code/ryzom/client/src/client.cpp:618