Anti_Virus.exe触发了断点.C 语言

Question

我写了一个"防病毒软件"（不是真正的防病毒软件 - 只是为了学习），它使用堆，有时当它需要使用堆时，它会中断有关该主题的消息，然后它给我消息："调试断言失败"和："表达式：_crtisvalidheappointer（puserdata）"我真的不知道为什么...在代码中，当 while 循环在此行中的第 5 次迭代中运行时，它发生在函数运行中：

if (!(results = (char**)realloc(results, sizeof(results) + sizeof(char*))))

该函数：

void run(char* dir_path, char* virus_path, char mode)
{
    DIR* dir = NULL;
    FILE* virus = NULL;
    struct dirent* cur_file;  // cur_file is a pointer for struct dirent which represnts the file we are checking now (current file)
    char** results = NULL;  // resullts will be an array of strings to write in the log
    int results_len = 0, i = 0;
    char* file_path = NULL;
    //checks the arguments:
    if (!(dir = opendir(dir_path)))  // argv[1] should be the directory
    {
        printf("The path that given as the first argument doesn't point to a directory / ");
        printf("an error has occurred while opening the directoryn");
        return -1;
    }
    if (!(virus = fopen(virus_path, "rb")))
    {
        printf("The path that given as the second argument doesn't point to a file / ");
        printf("an error has occurred while opening the filen");
        closedir(dir);
        return -1;
    }
    //running on the file in the directory:
    while (cur_file = readdir(dir))  // at the end of the directory readdir() will return NULL
    {
        if (!(strcmp(cur_file->d_name, ".")))  // at the first time wer'e reading from a directory the value of d_name will be "."
        {
            continue;
        }
        if (!(strcmp(cur_file->d_name, ".."))) //at the second time wer'e reading from a directory the value of d_name will be ".."
        {
            continue;
        }
        if (!(file_path = (char*)malloc(strlen(dir_path) + cur_file->d_namlen + 2))) //1 for  between dir_path and d_name and 1 for the NULL
        {
            closedir(dir);
            fclose(virus);
            return -1;
        }
        strcpy(file_path, dir_path);
        strcat(file_path, "\");
        strcat(file_path, cur_file->d_name);
        if (!(results)) // if results == NULL -> if didn't allocated memory for results already
        {
            if (!(results = (char**)malloc(sizeof(char*))))
            {
                printf("Problem with mallocn");
                free(file_path);
                closedir(dir);
                fclose(virus);
                return -1;
            }
        }
        else
        {
            if (!(results = (char**)realloc(results, sizeof(results) + sizeof(char*))))
            {
                printf("Problem with reallocn");
                for (i = 0; i < results_len; i++)
                {
                    free(results[i]);
                }
                free(file_path);
                free(results);
                closedir(dir);
                fclose(virus);
                return -1;
            }
        }    
        results[results_len] = check_file(file_path, virus, mode);
        if(results[results_len] == -1) // results_len will be updated later (just malloced)
        {
            for (i = 0; i < results_len; i++)
            {
                free(results[i]);
            }
            free(file_path);
            free(results);
            closedir(dir);
            fclose(virus);
            return -1;
        }
        results_len++;
        free(file_path);
    }
    fclose(virus);
    closedir(dir);
    write_to_log(dir_path, virus_path, mode, results, results_len);
}

函数 check_file 返回一个 char*（字符串），该字符串在 check_file 中定位错误，在其他函数中将自由。

有人知道原因吗？谢谢

Answer 1

这一行：

        if (!(results = (char**)realloc(results, sizeof(results) + sizeof(char*))))

不会增加results的大小（因此，随着result_len的增加，您正在跺脚它的末尾）。您可能想使用 (result_len + 1)*sizeof(char*) ，因为您已经在 results 中存储了字符串的数量。