mutt/2128: mutt segfaults on e-mail
>Number: 2128
>Notify-List:
>Category: mutt
>Synopsis: mutt segfaults on e-mail
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: mutt-dev
>State: open
>Keywords:
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Tue Nov 01 15:13:21 +0100 2005
>Originator: Karel Kulhavy
>Release: 1.5.8i
>Organization:
Twibright Labs
>Environment:
Gentoo Linux
>Description:
I wanted to attach the second segfault e-mail to the original bugreport but I
wasn't able to find it using search for bugreport. I used the word "segfault"
which I am sure I used in the original bugreport as well. I think the
bugreporting engine search function is crap.
Here it is. mutt again doesn't segfault when run on the isolated e-mail and the
backtrace is this time:
(gdb) bt full
#0 0xb7c93b51 in free () from /lib/libc.so.6
No symbol table info available.
#1 0x080a9d08 in ?? ()
No symbol table info available.
>How-To-Repeat:
No way
>Fix:
Read the mutt code and check it for correctness. You will find
other bugs as a bonus.
>Add-To-Audit-Trail:
>Unformatted:
----gnatsweb-attachment----
Content-Type: application/octet-stream; name="segfault2"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="segfault2"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