Bug 184139 - mailx dies with "panic: temporary file seek" on mailboxes larger than 128MB
Summary: mailx dies with "panic: temporary file seek" on mailboxes larger than 128MB
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: mailx
Version: 4.0
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
: ---
Assignee: Ivana Varekova
QA Contact:
URL:
Whiteboard:
: 184296 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-03-06 19:37 UTC by Dan Astoorian
Modified: 2007-11-30 22:07 UTC (History)
3 users (show)

Fixed In Version: RHBA-2006-0687
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-09-27 06:19:02 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2006:0687 0 normal SHIPPED_LIVE mailx bug fix update 2007-05-01 13:56:38 UTC

Description Dan Astoorian 2006-03-06 19:37:47 UTC
Description of problem:
Mailx aborts when attempting to display the index for any message which begins
more than 128MB from the start of the file.

Version-Release number of selected component (if applicable):
mailx-8.1.1

How reproducible:
always

Steps to Reproduce:
1. Create a mail folder which is larger than 128MB (134217728 bytes)
2. Append at least one message to this folder
3. Run "mail -f foldername"
4. Issue the command "h$" to attempt to display the last screenful of message
headers.
  
Actual results:
Abort with the error message:
    fseek: Invalid argument
    panic: temporary file seek
    Abort

Expected results:
Display of the last screenful of message headers.

Additional info:
The bug is caused by an integer overflow.  In def.h, struct message defines
m_block as a (signed) short.  Since m_block represents 4096 bytes, this causes
an overflow at 32768 * 4096 bytes, or 128MB.

Changing "short m_block;" to "long m_block;" in def.h and recompiling appears to
correct the symptom, although I have not tested to determine whether this
introduces any new problems.

Comment 10 Red Hat Bugzilla 2006-09-27 06:19:02 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2006-0687.html


Comment 11 Ivana Varekova 2006-12-18 13:24:48 UTC
*** Bug 184296 has been marked as a duplicate of this bug. ***

Comment 12 Matthew Miller 2007-02-21 21:23:43 UTC
I'm a bit confused. That errata is marked as affecting product "Other", and I
can't find the source RPM for it on ftp.redhat.com. Is an update going to be
released for RHEL4?

Comment 13 Radek Bíba 2007-02-22 16:07:44 UTC
The source RPM wasn't pushed to ftp.redhat.com for some reason, sorry. It's
there now.


Note You need to log in before you can comment on or make changes to this bug.