Package: mutt
Version: 2.0.5-4.1+deb11u1
Severity: normal

Hi,

I am attaching a maildir containing two public e-mail messages (they
were sent to debian-mentors) that can be opened with mutt -f. Opening
one of those messages causes a reproducible segfault on bullseye
systems.

unstable's mutt is not affected.

Here the backtrace:
[13/5007]mh@emptybullseye88:~/mutt-2.0.5/foo/bar $ gdb mutt ~/core 
GNU gdb (Debian 10.1-1.7) 10.1.90.20210103-git
Copyright (C) 2021 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from mutt...
Reading symbols from 
/usr/lib/debug/.build-id/d6/b3ef8976f7b5f8648d573547088fbf1565d460.debug...
[New LWP 23153]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Core was generated by `mutt -f test'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x000055d28f5d391d in pgp_gpgme_extract_keys (fp=0x7fff3efe2730, 
    keydata=0x55d28f6ef160) at ../../crypt-gpgme.c:2436
2436            fprintf (*fp, "%s %5.5s %d/%8s %s %s\n", more ? "sub" : "pub",
(gdb) bt
#0  0x000055d28f5d391d in pgp_gpgme_extract_keys (fp=0x7fff3efe2730, 
    keydata=0x55d28f6ef160) at ../../crypt-gpgme.c:2436
#1  pgp_gpgme_application_handler (m=0x55d28f6ea4f0, s=<optimized out>)
    at ../../crypt-gpgme.c:2857
#2  0x000055d28f57a02a in run_decode_and_handler (b=b@entry=0x55d28f6ea4f0, 
    s=s@entry=0x7fff3efe7040, 
    handler=handler@entry=0x55d28f5546e0 <crypt_pgp_application_pgp_handler>, 
plaintext=plaintext@entry=0) at ../../handler.c:1694
#3  0x000055d28f57a5e1 in mutt_body_handler (b=b@entry=0x55d28f6ea4f0, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1887
#4  0x000055d28f57abf3 in multipart_handler (a=a@entry=0x55d28f6ea170, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1282
#5  0x000055d28f57a02a in run_decode_and_handler (b=b@entry=0x55d28f6ea170, 
    s=s@entry=0x7fff3efe7040, 
    handler=handler@entry=0x55d28f57aae0 <multipart_handler>, 
    plaintext=plaintext@entry=0) at ../../handler.c:1694
#6  0x000055d28f57a5e1 in mutt_body_handler (b=b@entry=0x55d28f6ea170, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1887
#7  0x000055d28f57abf3 in multipart_handler (a=a@entry=0x55d28f6e7e10, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1282
#8  0x000055d28f57a02a in run_decode_and_handler (b=b@entry=0x55d28f6e7e10, 
    s=s@entry=0x7fff3efe7040, 
    handler=handler@entry=0x55d28f57aae0 <multipart_handler>, 
    plaintext=plaintext@entry=0) at ../../handler.c:1694
#9  0x000055d28f57a5e1 in mutt_body_handler (b=b@entry=0x55d28f6e7e10, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1887
#10 0x000055d28f553ed3 in mutt_signed_handler (a=0x55d28f6e7e10, 
    a@entry=0x55d28f6dd6d0, s=s@entry=0x7fff3efe7040) at ../../crypt.c:1192
#11 0x000055d28f57a02a in run_decode_and_handler (b=b@entry=0x55d28f6dd6d0, 
    s=s@entry=0x7fff3efe7040, 
    handler=handler@entry=0x55d28f553d00 <mutt_signed_handler>, 
    plaintext=plaintext@entry=0) at ../../handler.c:1694
#12 0x000055d28f57a5e1 in mutt_body_handler (b=b@entry=0x55d28f6dd6d0, 
    s=s@entry=0x7fff3efe7040) at ../../handler.c:1887
#13 0x000055d28f55ddf9 in _mutt_copy_message (
    fpout=fpout@entry=0x55d28f6701b0, fpin=0x55d28f6dc840, 
    hdr=hdr@entry=0x55d28f6d31d0, body=0x55d28f6dd6d0, 
    flags=<optimized out>, flags@entry=2124, chflags=<optimized out>, 
    chflags@entry=262294) at ../../copy.c:667
#14 0x000055d28f55df6b in mutt_copy_message (fpout=0x55d28f6701b0, 
    src=0x55d28f6d28d0, hdr=hdr@entry=0x55d28f6d31d0, 
    flags=flags@entry=2124, chflags=262294) at ../../copy.c:761
--Type <RET> for more, q to quit, c to continue without paging--c
#15 0x000055d28f555975 in mutt_display_message (cur=0x55d28f6d31d0) at 
../../commands.c:250
#16 0x000055d28f563216 in mutt_index_menu () at ../../curs_main.c:1474
#17 0x000055d28f543414 in main (argc=1, argv=0x7fff3efe88b8, environ=<optimized 
out>) at ../../main.c:1345
(gdb) 
(gdb) q
[14/5008]mh@emptybullseye88:~/mutt-2.0.5/foo/bar $ 

Greetings
Marc


-- Package-specific info:
Mutt 2.0.5 (2021-01-21)
Copyright (C) 1996-2021 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY NO WARRANTY; for details type `mutt -vv'.
Mutt is free software, and you are welcome to redistribute it
under certain conditions; type `mutt -vv' for details.

System: Linux 6.0.9-zgsrv20080 (x86_64)
ncurses: ncurses 6.2.20201114 (compiled with 6.2)
libidn2: 2.3.0 (compiled with 2.3.0)
hcache backend: tokyocabinet 1.4.48

Compiler:
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/10/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa:hsa
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 10.2.1-6' 
--with-bugurl=file:///usr/share/doc/gcc-10/README.Bugs 
--enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++,m2 --prefix=/usr 
--with-gcc-major-version-only --program-suffix=-10 
--program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id 
--libexecdir=/usr/lib --without-included-gettext --enable-threads=posix 
--libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu 
--enable-libstdcxx-debug --enable-libstdcxx-time=yes 
--with-default-libstdcxx-abi=new --enable-gnu-unique-object 
--disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib 
--enable-libphobos-checking=release --with-target-system-zlib=auto 
--enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 
--with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib 
--with-tune=generic 
--enable-offload-targets=nvptx-none=/build/gcc-10-Km9U7s/gcc-10-10.2.1/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/gcc-10-Km9U7s/gcc-10-10.2.1/debian/tmp-gcn/usr,hsa
 --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu 
--host=x86_64-linux-gnu --target=x86_64-linux-gnu 
--with-build-config=bootstrap-lto-lean --enable-link-mutex
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 10.2.1 20210110 (Debian 10.2.1-6) 

Configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' 
'--includedir=\${prefix}/include' '--mandir=\${prefix}/share/man' 
'--infodir=\${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' 
'--disable-option-checking' '--disable-silent-rules' 
'--libdir=\${prefix}/lib/x86_64-linux-gnu' '--runstatedir=/run' 
'--disable-maintainer-mode' '--disable-dependency-tracking' 
'--with-mailpath=/var/mail' '--enable-compressed' '--enable-debug' 
'--enable-fcntl' '--enable-hcache' '--enable-gpgme' '--enable-imap' 
'--enable-smtp' '--enable-pop' '--enable-sidebar' '--enable-dotlock' 
'--disable-fmemopen' '--with-curses' '--with-gnutls' '--with-gss' '--with-idn2' 
'--with-mixmaster' '--with-sasl' '--without-gdbm' '--without-bdb' 
'--without-qdbm' '--with-tokyocabinet' 'build_alias=x86_64-linux-gnu' 
'CFLAGS=-g -O2 -ffile-prefix-map=/build/mutt-IUWv3D/mutt-2.0.5=. 
-fstack-protector-strong -Wformat -Werror=format-security' 
'LDFLAGS=-Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'

Compilation CFLAGS: -Wall -pedantic -Wno-long-long -g -O2 
-ffile-prefix-map=/build/mutt-IUWv3D/mutt-2.0.5=. -fstack-protector-strong 
-Wformat -Werror=format-security

Compile options:
-DOMAIN
+DEBUG
-HOMESPOOL  +USE_SETGID  +USE_DOTLOCK  +DL_STANDALONE  +USE_FCNTL  -USE_FLOCK   
+USE_POP  +USE_IMAP  +USE_SMTP  
-USE_SSL_OPENSSL  +USE_SSL_GNUTLS  +USE_SASL  +USE_GSS  +HAVE_GETADDRINFO  
+HAVE_REGCOMP  -USE_GNU_REGEX  
+HAVE_COLOR  +HAVE_START_COLOR  +HAVE_TYPEAHEAD  +HAVE_BKGDSET  
+HAVE_CURS_SET  +HAVE_META  +HAVE_RESIZETERM  +HAVE_FUTIMENS  
+CRYPT_BACKEND_CLASSIC_PGP  +CRYPT_BACKEND_CLASSIC_SMIME  +CRYPT_BACKEND_GPGME  
-EXACT_ADDRESS  -SUN_ATTACHMENT  
+ENABLE_NLS  -LOCALES_HACK  +HAVE_WC_FUNCS  +HAVE_LANGINFO_CODESET  
+HAVE_LANGINFO_YESEXPR  
+HAVE_ICONV  -ICONV_NONTRANS  -HAVE_LIBIDN  +HAVE_LIBIDN2  +HAVE_GETSID  
+USE_HCACHE  
+USE_SIDEBAR  +USE_COMPRESSED  +USE_INOTIFY  
-ISPELL
SENDMAIL="/usr/sbin/sendmail"
MAILPATH="/var/mail"
PKGDATADIR="/usr/share/mutt"
SYSCONFDIR="/etc"
EXECSHELL="/bin/sh"
MIXMASTER="mixmaster"

To contact the developers, please mail to <mutt-...@mutt.org>.
To report a bug, please contact the Mutt maintainers via gitlab:
    https://gitlab.com/muttmua/mutt/issues


-- System Information:
Debian Release: 11.5
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.0.9-zgsrv20080 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8), LANGUAGE=en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mutt depends on:
ii  libc6             2.31-13+deb11u4
ii  libgnutls30       3.7.1-5+deb11u2
ii  libgpg-error0     1.38-2
ii  libgpgme11        1.14.0-1+b2
ii  libgssapi-krb5-2  1.18.3-6+deb11u2
ii  libidn2-0         2.3.0-5
ii  libncursesw6      6.2+20201114-2
ii  libsasl2-2        2.1.27+dfsg-2.1+deb11u1
ii  libtinfo6         6.2+20201114-2
ii  libtokyocabinet9  1.4.48-13
ii  zlib1g            1:1.2.11.dfsg-2+deb11u2

Versions of packages mutt recommends:
pn  libsasl2-modules  <none>
ii  locales           2.31-13+deb11u4
pn  mime-support      <none>
ii  sensible-utils    0.0.14

Versions of packages mutt suggests:
pn  aspell | ispell                            <none>
ii  ca-certificates                            20210119
ii  exim4-daemon-light [mail-transport-agent]  4.94.2-7
ii  gnupg                                      2.2.27-2+deb11u2
pn  mixmaster                                  <none>
ii  openssl                                    1.1.1n-0+deb11u3
pn  urlview                                    <none>

Versions of packages mutt is related to:
ii  mutt  2.0.5-4.1+deb11u1

-- no debconf information

Attachment: test.tar
Description: Unix tar archive

Reply via email to