[Users] [Bug 2697] New: [PATCH] Fix segfault in parse_parameters()

noreply at thewildbeast.co.uk noreply at thewildbeast.co.uk
Thu Jul 12 17:09:57 CEST 2012


http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2697

           Summary: [PATCH] Fix segfault in parse_parameters()
           Product: Claws Mail
           Version: 3.8.1
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Other
        AssignedTo: users at lists.claws-mail.org
        ReportedBy: mikhefr at gmail.com


Created an attachment (id=1127)
 --> (http://www.thewildbeast.co.uk/claws-mail/bugzilla/attachment.cgi?id=1127)
fix-procmime.patch

Can be reproduced with something like this in header:

Content-Type: application/msword; name=
       
"=?UTF-8?B?0JzQtdGC0L7QtNC40LrQsCDRgtC10YHRgtC40YDQvtCy0LDQvdC40Y8g0J/QniDQnw==?=
 =?UTF-8?B?0JDQmiAn0KHQvtCx0L7Qu9GMJyDQvdCwINCe0KEgQWx0IExpbnV4IDYuZG9j?="
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
       
filename*0*="UTF-8''%D0%9C%D0%B5%D1%82%D0%BE%D0%B4%D0%B8%D0%BA%D0%B0%20%D1";
       
filename*1*="%82%D0%B5%D1%81%D1%82%D0%B8%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0";
       
filename*2*="%B8%D1%8F%20%D0%9F%D0%9E%20%D0%9F%D0%90%D0%9A%20%27%D0%A1%D0";
       
filename*3*="%BE%D0%B1%D0%BE%D0%BB%D1%8C%27%20%D0%BD%D0%B0%20%D0%9E%D0%A1";
        filename*4*="%20%41%6C%74%20%4C%69%6E%75%78%20%36%2E%64%6F%63"

I'll try to show what happens:
In the convlist was added 'tmpattr' (e.g. "filename" in this case).
But it tries to find 'down_attr' in the convlist ("filename*n").
There is no such entry and "filename" will be added again and so on.
At last there is segfault in the line 1776 (lang = strchr(charset, '\''), where
is charset=NULL).

-- 
Configure bugmail: http://www.thewildbeast.co.uk/claws-mail/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the Users mailing list