Bug#716252: maildrop: reformime: null pointer dereference in extract_section()
Osamu Aoki <[email protected]> Sun, 24 Dec 2017 08:57:46 +0900
| Newsgroups | gmane.mail.maildrop |
|---|---|
| Message-ID | <[email protected]> |
Hi, I just uploaded maildrop 2.9.3 to Debian. Thanks for many upstream fixes. I'm forwarding another bug report from the Debian bug tracking system (If you already dealt with this, sorry, missed it the last time around): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=716252 --- From: Jakub Wilk <[email protected]> To: [email protected] Subject: Re: Bug#716252: [Mayhem] Bug report on courier-maildrop: reformime crashes with exit status 139 Date: Thu, 5 Oct 2017 18:12:44 +0200 Minimal reproducer: $ reformime -x -s moo < /dev/null Segmentation fault GDB says it's a null pointer dereference: Program received signal SIGSEGV, Segmentation fault. extract_section (top_rfcp=0x0, mimesection=0x565749b8 "moo", extract_filename=0x0, argc=0, argv=0xffffd584, extract_func=0x565587d0 <extract_file>) at reformime.c:656 656 if (top_rfcp->firstpart) (gdb) print top_rfcp $1 = (struct rfc2045 *) 0x0 (gdb) bt #0 extract_section (top_rfcp=0x0, mimesection=0x565749b8 "moo", extract_filename=0x0, argc=0, argv=0xffffd584, extract_func=0x565587d0 <extract_file>) at reformime.c:656 #1 0x56556ee5 in main2 (argv=<optimized out>, argc=<optimized out>, mimecharset=<optimized out>) at reformime.c:1181 #2 main (argc=<optimized out>, argv=<optimized out>) at reformime.c:1226 -- Jakub Wilk --- I still see the problem in 2.9.3 Regards, Osamu ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot