Recent changes to patches

#19 Fix use after free in qucsMessageOutput

artsurd — Wed, 25 Mar 2026 20:45:07 -0000

Looks like the code was merged on GitHub
https://github.com/Qucs/qucs/commit/4f8625ef32619a650ca78d1785e684077f5aac1d

Which appears to have made it here too:
https://sourceforge.net/p/qucs/git/ci/4f8625ef32619a650ca78d1785e684077f5aac1d/

Glad it made it in!
I agree Codeberg is good. Zig went there as a middle finger to GitHub and Microslop. My own GitHub is mostly taken down now because of all the LLMs not respecting licenses.

Have had a go with Gitea and Codeberg. It's nice in a way; git was made to be dectranlised, it's getting to flex those muscles a bit and all seems to be going well. My projects on Gitea are well integrated with some on GitHub and I made a change no SourceForge (this one, first time!) as well as a RP on Codeberg. Woo!

Happy to go where need be.

#19 Fix use after free in qucsMessageOutput

artsurd — Wed, 25 Mar 2026 01:29:26 -0000

GitHub PR: https://github.com/Qucs/qucs/pull/1116

#19 Fix use after free in qucsMessageOutput

artsurd — Wed, 25 Mar 2026 01:27:40 -0000

Here is the patch.

Fix use after free in qucsMessageOutput

artsurd — Wed, 25 Mar 2026 01:26:35 -0000

Hello,

I haven't used SourceForge like this before, but thought I'd give it a go. I've also made the same request on GitHub in case this is the wrong place.

I noticed a use-after-free in qucsMessageOutput. The problem is that toUtf8 returns a QByteArray, so the call to .data() is on an rvalue which gets freed after the expression ends.

On my machine, this results in intermittent crashes. I verified the fix by running the address sanitizer before and after.

Before:

❯ ./qucs/qucs
=================================================================
==138986==ERROR: AddressSanitizer: heap-use-after-free on address 0x7c74c41e3358 at pc 0x7f54ca07d276 bp 0x7fff103b8f70 sp 0x7fff103b86e8
READ of size 85 at 0x7c74c41e3358 thread T0
    #0 0x7f54ca07d275  (/usr/lib/libasan.so.8+0x7d275) (BuildId: de2d781fb7f18c0d865c9e63460465acc493f0f4)
    #1 0x7f54ca0a816c in vfprintf (/usr/lib/libasan.so.8+0xa816c) (BuildId: de2d781fb7f18c0d865c9e63460465acc493f0f4)
    #2 0x7f54ca0ab344 in fprintf (/usr/lib/libasan.so.8+0xab344) (BuildId: de2d781fb7f18c0d865c9e63460465acc493f0f4)
    #3 0x55b7d3060923 in qucsMessageOutput(QtMsgType, QMessageLogContext const&, QString const&) /home/artsurd/source/qucs/qucs/main.cpp:49
    #4 0x7f54c86f37d7  (/usr/lib/libQt5Core.so.5+0xf37d7) (BuildId: 168ffc14d4239e8cf2a2400257f9c95f00fa8b41)
    #5 0x7f54c86f38b0 in qt_message_output(QtMsgType, QMessageLogContext const&, QString const&) (/usr/lib/libQt5Core.so.5+0xf38b0) (BuildId: 168ffc14d4239e8cf2a2400257f9c95f00fa8b41)
    #6 0x7f54c87fa030 in QDebug::~QDebug() (/usr/lib/libQt5Core.so.5+0x1fa030) (BuildId: 168ffc14d4239e8cf2a2400257f9c95f00fa8b41)
    #7 0x55b7d3069e3b in main /home/artsurd/source/qucs/qucs/main.cpp:440
    #8 0x7f54c7e27c0d  (/usr/lib/libc.so.6+0x27c0d) (BuildId: 45bece07c9d751c2251242b44c114e38d08c5eff)
    #9 0x7f54c7e27d4a in __libc_start_main (/usr/lib/libc.so.6+0x27d4a) (BuildId: 45bece07c9d751c2251242b44c114e38d08c5eff)
    #10 0x55b7d3060614 in _start (/home/artsurd/source/qucs/qucs/qucs.real+0x6e6614) (BuildId: 6941858d755eb1433c6ed4f28164452aba7aa719)

0x7c74c41e3358 is located 24 bytes inside of 277-byte region [0x7c74c41e3340,0x7c74c41e3455)
freed by thread T0 here:
    #0 0x7f54ca17a8ad  (/usr/lib/libasan.so.8+0x17a8ad) (BuildId: de2d781fb7f18c0d865c9e63460465acc493f0f4)
    #1 0x55b7d3070ef8 in QTypedArrayData<char>::deallocate(QArrayData*) /usr/include/qt/QtCore/qarraydata.h:239
    #2 0x55b7d306deda in QByteArray::~QByteArray() /usr/include/qt/QtCore/qbytearray.h:497
    #3 0x55b7d30607da in qucsMessageOutput(QtMsgType, QMessageLogContext const&, QString const&) /home/artsurd/source/qucs/qucs/main.cpp:40
    #4 0x7f54c86f37d7  (/usr/lib/libQt5Core.so.5+0xf37d7) (BuildId: 168ffc14d4239e8cf2a2400257f9c95f00fa8b41)

previously allocated by thread T0 here:
    #0 0x7f54ca17bc7d in malloc (/usr/lib/libasan.so.8+0x17bc7d) (BuildId: de2d781fb7f18c0d865c9e63460465acc493f0f4)
    #1 0x7f54c8700820 in QArrayData::allocate(unsigned long, unsigned long, unsigned long, QFlags<QArrayData::AllocationOption>) (/usr/lib/libQt5Core.so.5+0x100820) (BuildId: 168ffc14d4239e8cf2a2400257f9c95f00fa8b41)

SUMMARY: AddressSanitizer: heap-use-after-free /home/artsurd/source/qucs/qucs/main.cpp:49 in qucsMessageOutput(QtMsgType, QMessageLogContext const&, QString const&)
Shadow bytes around the buggy address:
  0x7c74c41e3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7c74c41e3100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7c74c41e3180: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x7c74c41e3200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x7c74c41e3280: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa
=>0x7c74c41e3300: fa fa fa fa fa fa fa fa fd fd fd[fd]fd fd fd fd
  0x7c74c41e3380: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x7c74c41e3400: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x7c74c41e3480: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7c74c41e3500: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x7c74c41e3580: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07 
  Heap left redzone:       fa
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  Intra object redzone:    bb
  ASan internal:           fe
  Left alloca redzone:     ca
  Right alloca redzone:    cb
==138986==ABORTING

After:

[ no ASAN issue raised ]

Transient Sim treats initial Open Switch as Closed. v0.0.20

brewmanz — Wed, 16 Jun 2021 00:16:53 -0000

I am trying to get the Transient Simulator to behave, and cannot get sensible results.
I have created a simple test to show that an initially open switch is treated as closed.
What am I doing wrong? Am I misunderstanding something? Thank you.
. . .
Screenshot attached
. . .
I am having difficulty adding more than one file; they seem to disappear. including inline ...
SST_1.sch
<qucs schematic="" 0.0.20="">
<properties>
<view=0,0,800,800,1,0,0>
<grid=10,10,1>
<dataset=sst_1.dat>
<datadisplay=sst_1.dpl>
<opendisplay=1>
<script=sst_1.m>
<runscript=0>
<showframe=0>
<frametext0=title>
<frametext1=drawn by:="">
<frametext2=date:>
<frametext3=revision:>
</frametext3=revision:></frametext2=date:></frametext1=drawn></frametext0=title></showframe=0></runscript=0></script=sst_1.m></opendisplay=1></datadisplay=sst_1.dpl></dataset=sst_1.dat></grid=10,10,1></view=0,0,800,800,1,0,0></properties>
<symbol>
</symbol>
<components>
<vdc v1="" 1="" 80="" 90="" 18="" -26="" 0="" "1.5432="" v"="">
<gnd *="" 5="" 80="" 120="" 0="">
<.TR TR1 1 590 50 0 59 0 0 "lin" 1 "0" 1 "10 us" 1 "11" 0 "Trapezoidal" 0 "2" 0 "1 ns" 0 "1e-16" 0 "150" 0 "0.001" 0 "1 pA" 0 "1 uV" 0 "26.85" 0 "1e-3" 0 "1e-6" 0 "1" 0 "CroutLU" 0 "no" 0 "yes" 0 "0" 0>
<gnd *="" 5="" 440="" 120="" 0="">
<switch s1="" 1="" 250="" 60="" -26="" 11="" 0="" "off"="" "1="" us"="" "0"="" "1e12"="" "26.85"="" "1e-6"="" "spline"="">
<c c1="" 1="" 440="" 90="" 17="" -26="" 0="" "100="" nf"="" ""="" "neutral"="">
<r r1="" 1="" 350="" 60="" -26="" 15="" 0="" "1e6="" ohm"="" "26.85"="" "0.0"="" "european"="">
</r></c></switch></gnd></gnd></vdc></components>
<wires>
<80 60 220 60 "" 0 0 0 "">
<380 60 440 60 "Cap" 440 20 20 "">
<280 60 320 60 "PreR" 300 20 0 "">
</wires>
<diagrams>
<tab 70="" 463="" 298="" 263="" 3="" #c0c0c0="" 1="" 00="" 0="" 11="" 315="" 225="" ""="">
<"PreR.Vt" #0000ff 0 5 0 0 0>
<"Cap.Vt" #0000ff 0 5 0 0 0>
</tab>
</diagrams>
<paintings>
</paintings></qucs>

#17 [Patch] An update for desktop file

Guilherme — Mon, 14 Sep 2015 19:30:49 -0000

status: accepted --> closed

#17 [Patch] An update for desktop file

Guilherme — Mon, 14 Sep 2015 19:30:37 -0000

status: open --> accepted

#17 [Patch] An update for desktop file

Guilherme — Mon, 14 Sep 2015 19:30:21 -0000

Thanks. This is now https://github.com/Qucs/qucs/pull/354

#17 [Patch] An update for desktop file

AlexL — Fri, 28 Aug 2015 19:02:27 -0000

There is patch in attachment.

#17 [Patch] An update for desktop file

AlexL — Fri, 28 Aug 2015 18:36:54 -0000

This patch fixes issues above, adds GenericName.
This patch adds translations for GenericName (generated from http://svn.opensuse.org/svn/opensuse-i18n/trunk/lcn/), for Comment (generated from https://translations.launchpad.net/ubuntu/precise/+source/app-install-data-ubuntu/+pots/app-install-data).