(gdb) bt full
#0  0x080e8005 in MSG_WriteString (sb=0xbfce9ddc, 
    s=0x28 <Address 0x28 out of bounds>) at src/qcommon/msg.c:141
No locals.
#1  0x08066780 in B_Save (sb=0xbfce9ddc, data=0x0)
    at src/client/cl_basemanagement.c:3090
        i = 0
        k = 0
        l = 0
        b = (base_t *) 0x118cf3a4
        aircraft = (aircraft_t *) 0x118cf89c
        building = (building_t *) 0x11b02b10
#2  0x080b5d4a in SAV_GameSave (filename=0x15f12924 "slot1", 
    comment=0xbfce9f8c "10", error=0xbfce9f80) at src/client/cl_save.c:253
        sb = {allowoverflow = qfalse, overflowed = qfalse, 
  data = 0xa79d9034 "\027J", maxsize = 3145728, cursize = 4986, readcount = 0}
        i = 1
        diff = 94
        res = 293331616
        savegame = "/home/jaska/.ufoai/2.2-dev/base/save/slot1.sav", '\0' <repeats 81 times>
        buf = (byte *) 0xa79d9034 "\027J"
        fbuf = (byte *) 0x0
        bufLen = 293331616
---Type <return> to continue, or q <return> to quit---
        day = 293331616
        month = 293331616
        header = {version = 0, compressed = 0, dummy = {0, 0, -1076977972, 
    -1211117615, -72515583, 285212672, 0, 293335712, 293335712, 293335729, 
    293339807, 0, 104, 112}, 
  gameVersion = "\200�۷��Ϸ\000\000\000\000\000\000\000", 
  name = "�2\021\b\000\000\000\000\230\036\r\b\000\000\000\t\000\000\000\000�@\b\026�\236οXAݷ", 
  gameDate = "XAݷPAݷ\002\000\000\000�\000\000\000�/ݷH\000\000\000DAݷPAݷ", 
  realDate = "h\000\000\000\000\000\000\000\002\000\000\000\003\000\000\000\204aG1�a\000\000\000?\006\026@)ݷ"}
#3  0x080b630d in SAV_GameSave_f () at src/client/cl_save.c:341
        comment = "10", '\0' <repeats 29 times>
        error = 0x0
        arg = 0x165ba5dc "10"
        result = 3217989560
        __PRETTY_FUNCTION__ = "SAV_GameSave_f"
#4  0x080d3402 in Cmd_ExecuteString (
    text=0xbfce9ffc "game_save slot1 *mn_slot1") at src/qcommon/cmd.c:935
        cmd = (cmd_function_t *) 0x12a8fdf4
        a = (cmd_alias_t *) 0xbca3e941
        str = 0x16373dd4 "game_save"
        hash = 24
---Type <return> to continue, or q <return> to quit---
#5  0x080d2156 in Cbuf_Execute () at src/qcommon/cmd.c:266
        i = 26
        text = 0x95a5ea0 " game_comments\n *mn_slot1; game_comments\nircraft_item_model_slot7;\n\nel mn_aircraft_item_model_slot7;\nel mn_aircraft_item_model_slot7;\n\nel mn_aircraft_item_model_slot7;\nel mn_aircraft_item_model_slot7;"...
        line = "game_save slot1 *mn_slot1\000\004�dr}<YY\026�\030�\b<\212%i��?h���':�A\r��:�<�V'�Vv\t=\032U\213<E2\213��\006�<Ek$�\035\033/��\002����=�\000\004\000\000���\022\020\000\000\000\004\000\000\000\000\001\000\000�S\201���0��p\203�\000\001\000\0000\016�\022�\016�\022�\r�\022\000\004\000\000\020\000\000\000�\214\225:\000\000\000\000\b��\025Dq�����\022\000\004\000\000��ο�\016�����\022�\004\000\000\022\001\000\000�\r�\022"...
        quotes = 0
#6  0x0808f45e in CL_SendCommand () at src/client/cl_main.c:2270
No locals.
#7  0x0808f98b in CL_Frame (now=68458, data=0x0) at src/client/cl_main.c:2468
        delta = 12
        lasttimecalled = 0
        last_frame = 68458
#8  0x080df957 in tick_timer (now=68458, data=0x154f9cc8)
    at src/qcommon/common.c:969
        timer = (struct timer *) 0x154f9cc8
        old_interval = 11
        lateness = 1
---Type <return> to continue, or q <return> to quit---
#9  0x080dfbb0 in Qcommon_Frame () at src/qcommon/common.c:1056
        event = (struct event *) 0x159037e8
        time_to_next = 0
#10 0x081027cc in main (argc=7, argv=0xbfcea574)
    at src/ports/linux/sys_linux.c:369
No locals.