Package: mairix
Version: 0.20-1
Severity: important
Tags: patch

Hello,

make_nvp() crashes if the input string is not valid, because
nvp_next_state may return -1.  Changing

    current_state = nvp_next_state(current_state, tok);

to

    if (0 > (current_state = nvp_next_state(current_state, tok)))
        current_state = nvp_in;

in nvp.c fixes this problem.

Thanks,
        Ken

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18
Locale: LANG=zh_TW.UTF-8, LC_CTYPE=zh_TW.UTF-8 (charmap=UTF-8)

Versions of packages mairix depends on:
ii  libbz2-1.0                  1.0.3-6      high-quality block-sorting file co
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  zlib1g                      1:1.2.3-13   compression library - runtime

mairix recommends no packages.

-- no debconf information

-- 
Edit this signature at http://www.digitas.harvard.edu/cgi-bin/ken/sig
As the choice is essentially cosmetic there will likely be no end to
the debate on what the correct decision should be.
http://successor-ml.org/index.php?title=Quoting/anti-quoting

Attachment: signature.asc
Description: Digital signature

Reply via email to