Red Hat Bugzilla – Bug 3189
readmsg seg faults (elm-2.5.0-0.2pre8)
Last modified: 2015-01-07 18:37:29 EST
executing: /usr/bin/readmsg \*
causes a seg fault
It segs in: readmsg.c at line 341
if(get_mssg_info(&minfo, fstate.sel_list[i] != 0)
The problem seems to be with fstate.sel_list being an
(int *) and w/ bad bounds checking.
I've just packaged elm2.5.0-1 (the official release). If you
get a chance, could you see if seg-fault persists there.
Send mail to <firstname.lastname@example.org> and I'll send you the rpms.
Fixed in elm-2.5.0-2. Thanks for the analysis and patch!