Package: mairix Version: 0.20-1 Severity: important Tags: patch Hello,
make_nvp() crashes if the input string is not valid, because nvp_next_state may return -1. Changing current_state = nvp_next_state(current_state, tok); to if (0 > (current_state = nvp_next_state(current_state, tok))) current_state = nvp_in; in nvp.c fixes this problem. Thanks, Ken -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18 Locale: LANG=zh_TW.UTF-8, LC_CTYPE=zh_TW.UTF-8 (charmap=UTF-8) Versions of packages mairix depends on: ii libbz2-1.0 1.0.3-6 high-quality block-sorting file co ii libc6 2.3.6.ds1-13 GNU C Library: Shared libraries ii zlib1g 1:1.2.3-13 compression library - runtime mairix recommends no packages. -- no debconf information -- Edit this signature at http://www.digitas.harvard.edu/cgi-bin/ken/sig As the choice is essentially cosmetic there will likely be no end to the debate on what the correct decision should be. http://successor-ml.org/index.php?title=Quoting/anti-quoting
signature.asc
Description: Digital signature