> The crash occurs because the call to process_abbrev_section subtracts > out the section address, thus passing an invalid pointer to > process_abbrev_section. > > Can someone explain the reason for this? I don't understand it. It looks like a bug, pure and simple, to me. Notice that section.address is *not* subtracted in forming the ending address. -cary