I have found and fixed an apparent bug in src/libc/go32/gormcb.c in
the released v2. I haven't checked the latest beta version, but
I can't find any mention of this bug in the bug tracking system.
The symptom is that _go32_dpmi_free_real_mode_callback()
passes a bad pointer to free() when it tries to free the interrupt
stack. (I detected this with my own malloc/free code that
checks the hidden header in a memory block for invalid contents).
The problem appears to be with the code that extracts the allocated
stack address from where an offset from it was stashed in the data area
at the base of the interrupt stack. This offset doesn't match the value
stored when the callback was set up. Here's the fix:
src/libc/go32/gormcb.c
190c190
< stack = (char *)(*(long *)((long) info->size+0x12) - 8);
---
> stack = (char *)(*(long *)((long) info->size+0x12) - 4); /* fix prk */
--Phil