tags 716149 + upstream forwarded 716149 https://sourceforge.net/p/pmt/bugs/60/ thanks
I looked into this bug a little. It boils down to failure to check for the end of `argv`; the provided test case fingers only one of several different places where this check is missing. I have sent the bug report on to upstream, with more detail. I do not think this is an *exploitable* crash, since the kernel guarantees argv[argc] will be a null pointer, and arguments appear always to be read in sequence. zw -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
