bugGNU Mailutils - Bugs: bug #44497, Core dump trying to exec tail from...

 
 

bug #44497: Core dump trying to exec tail from within body of email

Submitter:  None
Submitted:  Mon 09 Mar 2015 09:01:02 PM UTC
   
 
Category:  None Severity:  3 - Normal
Item Group:  None Status:  Fixed
Privacy:  Public Assigned to:  None
Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 25 Jul 2017 03:02:57 PM UTC, comment #1: 

Fixed in git HEAD (tested on commit dc1a60ad7d95b8d677b7b956ee31d65608e4945e).

Sergey Poznyakoff <gray>
Group administrator
Mon 09 Mar 2015 09:01:02 PM UTC, original submission:  

PLEASE NOTE: this bug was also submitted via email to -email is unavailable-

Following manpage to exec shell command from within body of email, I do the following:
~!tail /var/log/dmesg
and the entire program coredumps:

* glibc detected * mail: free(): invalid pointer: 0x09015001 *
======= Backtrace: =========
/lib/i386-linux-gnu/libc.so.6(+0x75232)[0xb7552232]
/usr/lib/libmailutils.so.2(mu_argcv_free+0x2d)[0xb76f714d]
mail[0x805a9fd]
mail[0x805b1f7]
mail[0x805d5df]
mail[0x804d8e2]
/lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xf3)[0xb74f64d3]
mail[0x804dda5]
======= Memory map: ========
08048000-08073000 r-xp 00000000 08:01 5142       /usr/bin/mail.mailutils
08073000-08074000 r--p 0002a000 08:01 5142       /usr/bin/mail.mailutils
08074000-08076000 rw-p 0002b000 08:01 5142       /usr/bin/mail.mailutils
0900e000-0902f000 rw-p 00000000 00:00 0          [heap]
b681a000-b6825000 r-xp 00000000 08:01 685920     /lib/i386-linux-gnu/libnss_files-2.15.so
b6825000-b6826000 r--p 0000a000 08:01 685920     /lib/i386-linux-gnu/libnss_files-2.15.so
b6826000-b6827000 rw-p 0000b000 08:01 685920     /lib/i386-linux-gnu/libnss_files-2.15.so
b6827000-b6831000 r-xp 00000000 08:01 685916     /lib/i386-linux-gnu/libnss_nis-2.15.so
b6831000-b6832000 r--p 00009000 08:01 685916     /lib/i386-linux-gnu/libnss_nis-2.15.so
b6832000-b6833000 rw-p 0000a000 08:01 685916     /lib/i386-linux-gnu/libnss_nis-2.15.so
b6833000-b6849000 r-xp 00000000 08:01 685930     /lib/i386-linux-gnu/libnsl-2.15.so
b6849000-b684a000 r--p 00015000 08:01 685930     /lib/i386-linux-gnu/libnsl-2.15.so
b684a000-b684b000 rw-p 00016000 08:01 685930     /lib/i386-linux-gnu/libnsl-2.15.so
b684b000-b684d000 rw-p 00000000 00:00 0
b6863000-b6874000 r-xp 00000000 08:01 689560     /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so
b6874000-b6875000 r--p 00010000 08:01 689560     /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so
b6875000-b6876000 rw-p 00011000 08:01 689560     /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so
b6876000-b6a76000 r--p 00000000 08:01 131108     /usr/lib/locale/locale-archive
b6a76000-b6a79000 rw-p 00000000 00:00 0
b6a79000-b6b1b000 r-xp 00000000 08:01 654584     /usr/lib/i386-linux-gnu/libsqlite3.so.0.8.6
b6b1b000-b6b1c000 r--p 000a2000 08:01 654584     /usr/lib/i386-linux-gnu/libsqlite3.so.0.8.6
b6b1c000-b6b1d000 rw-p 000a3000 08:01 654584     /usr/lib/i386-linux-gnu/libsqlite3.so.0.8.6
b6b1d000-b6b1f000 rw-p 00000000 00:00 0
b6b1f000-b6b62000 r-xp 00000000 08:01 656466     /usr/lib/i386-linux-gnu/libhx509.so.5.0.0
b6b62000-b6b63000 ---p 00043000 08:01 656466     /usr/lib/i386-linux-gnu/libhx509.so.5.0.0
b6b63000-b6b64000 r--p 00043000 08:01 656466     /usr/lib/i386-linux-gnu/libhx509.so.5.0.0
b6b64000-b6b66000 rw-p 00044000 08:01 656466     /usr/lib/i386-linux-gnu/libhx509.so.5.0.0
b6b66000-b6b73000 r-xp 00000000 08:01 656460     /usr/lib/i386-linux-gnu/libheimbase.so.1.0.0
b6b73000-b6b74000 r--p 0000c000 08:01 656460     /usr/lib/i386-linux-gnu/libheimbase.so.1.0.0
b6b74000-b6b75000 rw-p 0000d000 08:01 656460     /usr/lib/i386-linux-gnu/libheimbase.so.1.0.0
b6b75000-b6b9c000 r-xp 00000000 08:01 656464     /usr/lib/i386-linux-gnu/libwind.so.0.0.0
b6b9c000-b6b9d000 r--p 00027000 08:01 656464     /usr/lib/i386-linux-gnu/libwind.so.0.0.0
b6b9d000-b6b9e000 rw-p 00028000 08:01 656464     /usr/lib/i386-linux-gnu/libwind.so.0.0.0
b6b9e000-b6ba0000 r-xp 00000000 08:01 657882     /lib/i386-linux-gnu/libkeyutils.so.1.4
b6ba0000-b6ba1000 r--p 00002000 08:01 657882     /lib/i386-linux-gnu/libkeyutils.so.1.4
b6ba1000-b6ba2000 rw-p 00003000 08:01 657882     /lib/i386-linux-gnu/libkeyutils.so.1.4
b6ba2000-b6bb6000 r-xp 00000000 08:01 656450     /usr/lib/i386-linux-gnu/libroken.so.18.1.0
b6bb6000-b6bb7000 r--p 00013000 08:01 656450     /usr/lib/i386-linux-gnu/libroken.so.18.1.0
b6bb7000-b6bb8000 rw-p 00014000 08:01 656450     /usr/lib/i386-linux-gnu/libroken.so.18.1.0
b6bb8000-b6bb9000 rw-p 00000000 00:00 0
b6bb9000-b6beb000 r-xp 00000000 08:01 656456     /usr/lib/i386-linux-gnu/libhcrypto.so.4.1.0
b6beb000-b6bec000 r--p 00032000 08:01 656456     /usr/lib/i386-linux-gnu/libhcrypto.so.4.1.0
b6bec000-b6bed000 rw-p 00033000 08:01 656456     /usr/lib/i386-linux-gnu/libhcrypto.so.4.1.0
b6bed000-b6bee000 rw-p 00000000 00:00 0
b6bee000-b6c8e000 r-xp 00000000 08:01 656454     /usr/lib/i386-linux-gnu/libasn1.so.8.0.0
b6c8e000-b6c8f000 ---p 000a0000 08:01 656454     /usr/lib/i386-linux-gnu/libasn1.so.8.0.0
b6c8f000-b6c90000 r--p 000a0000 08:01 656454     /usr/lib/i386-linux-gnu/libasn1.so.8.0.0
b6c90000-b6c93000 rw-p 000a1000 08:01 656454     /usr/lib/i386-linux-gnu/libasn1.so.8.0.0
b6c93000-b6d12000 r-xp 00000000 08:01 656469     /usr/lib/i386-linux-gnu/libkrb5.so.26.0.0
b6d12000-b6d14000 r--p 0007e000 08:01 656469     /usr/lib/i386-linux-gnu/libkrb5.so.26.0.0
b6d14000-b6d16000 rw-p 00080000 08:01 656469     /usr/lib/i386-linux-gnu/libkrb5.so.26.0.0
b6d16000-b6d1c000 r-xp 00000000 08:01 656471     /usr/lib/i386-linux-gnu/libheimntlm.so.0.1.0
b6d1c000-b6d1d000 r--p 00005000 08:01 656471     /usr/lib/i386-linux-gnu/libheimntlm.so.0.1.0
b6d1d000-b6d1e000 rw-p 00006000 08:01 656471     /usr/lib/i386-linux-gnu/libheimntlm.so.0.1.0
b6d1e000-b6d25000 r-xp 00000000 08:01 686376     /usr/lib/i386-linux-gnu/libkrb5support.so.0.1
b6d25000-b6d26000 r--p 00006000 08:01 686376     /usr/lib/i386-linux-gnu/libkrb5support.so.0.1
b6d26000-b6d27000 rw-p 00007000 08:01 686376     /usr/lib/i386-linux-gnu/libkrb5support.so.0.1
b6d27000-b6d28000 rw-p 00000000 00:00 0
b6d28000-b6d2b000 r-xp 00000000 08:01 658188     /lib/i386-linux-gnu/libcom_err.so.2.1
b6d2b000-b6d2c000 r--p 00002000 08:01 658188     /lib/i386-linux-gnu/libcom_err.so.2.1
b6d2c000-b6d2d000 rw-p 00003000 08:01 658188     /lib/i386-linux-gnu/libcom_err.so.2.1
b6d2d000-b6d53000 r-xp 00000000 08:01 686374     /usr/lib/i386-linux-gnu/libk5crypto.so.3.1
b6d53000-b6d54000 r--p 00025000 08:01 686374     /usr/lib/i386-linux-gnu/libk5crypto.so.3.1
b6d54000-b6d55000 rw-p 00026000 08:01 686374     /usr/lib/i386-linux-gnu/libk5crypto.so.3.1
b6d55000-b6e1d000 r-xp 00000000 08:01 666365     /usr/lib/i386-linux-gnu/libkrb5.so.3.3
b6e1d000-b6e23000 r--p 000c7000 08:01 666365     /usr/lib/i386-linux-gnu/libkrb5.so.3.3
b6e23000-b6e24000 rw-p 000cd000 08:01 666365     /usr/lib/i386-linux-gnu/libkrb5.so.3.3
b6e24000-b6e27000 r-xp 00000000 08:01 686543     /lib/i386-linux-gnu/libgpg-error.so.0.8.0
b6e27000-b6e28000 r--p 00002000 08:01 686543     /lib/i386-linux-gnu/libgpg-error.so.0.8.0
b6e28000-b6e29000 rw-p 00003000 08:01 686543     /lib/i386-linux-gnu/libgpg-error.so.0.8.0Aborted (core dumped)

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by gray (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-07-25 gray StatusNone Fixed
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-758e.
    Corresponding source code