Bugzilla Bug 170301

I received an email message which, when viewed in pine, pressing the "H" (view
headers) key causes Pine to crash (segmentation fault). This happens in ebuilt
pine 4.64.

Since the ebuild doesn't include debugging symbols, I downloaded a fresh copy
of Pine release 4.64 and built it myself, and it doesn't show the problem (but
it was compiled without SSL support for some reason, may or may not matter).

Therefore, I guess the problem is in the ebuild options or patches. I'm not
sure how to compile the ebuild with debug symbols to debug this further.

I can forward the offending message to anyone who's interested.

Reproducible: Always

Steps to Reproduce:
1. Open ebuilt pine 4.64
2. View offending message
3. Press 'H'


Actual Results:  
Pine crashes with segfault.

Expected Results:  
Pine doesn't crash.

Portage 2.1.1-r2 (default-linux/x86/2006.1, gcc-3.3.6, glibc-2.3.5-r2,
2.6.15.6-vs2-skas3 i686)
=================================================================
System uname: 2.6.15.6-vs2-skas3 i686 AMD Athlon(tm) 64 Processor 3200+
Gentoo Base System version 1.6.13
Last Sync: Sat, 10 Mar 2007 01:30:08 +0000
ccache version 2.3 [disabled]
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: [Not Present]
dev-lang/python:     2.3.4-r1, 2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1
sys-devel/gcc-config: 1.3.12-r6
sys-devel/libtool:   1.4.3-r4, 1.5.22
virtual/os-headers:  2.6.11-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i386-pc-linux-gnu"
CFLAGS="-O2 -mcpu=i686 -fomit-frame-pointer"
CHOST="i386-pc-linux-gnu"
CONFIG_PROTECT="/etc /var/bind"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/mail/dspam /etc/terminfo"
CXXFLAGS="-O2 -mcpu=i686 -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer sandbox sfperms strict"
GENTOO_MIRRORS="http://distfiles.gentoo.org
http://distro.ibiblio.org/pub/linux/distributions/gentoo"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 alsa_cards_ali5451 alsa_cards_als4000 alsa_cards_atiixp
alsa_cards_atiixp-modem alsa_cards_bt87x alsa_cards_ca0106 alsa_cards_cmipci
alsa_cards_emu10k1 alsa_cards_emu10k1x alsa_cards_ens1370 alsa_cards_ens1371
alsa_cards_es1938 alsa_cards_es1968 alsa_cards_fm801 alsa_cards_hda-intel
alsa_cards_intel8x0 alsa_cards_intel8x0m alsa_cards_maestro3 alsa_cards_trident
alsa_cards_usb-audio alsa_cards_via82xx alsa_cards_via82xx-modem
alsa_cards_ymfpci alsa_pcm_plugins_adpcm alsa_pcm_plugins_alaw
alsa_pcm_plugins_asym alsa_pcm_plugins_copy alsa_pcm_plugins_dmix
alsa_pcm_plugins_dshare alsa_pcm_plugins_dsnoop alsa_pcm_plugins_empty
alsa_pcm_plugins_extplug alsa_pcm_plugins_file alsa_pcm_plugins_hooks
alsa_pcm_plugins_iec958 alsa_pcm_plugins_ioplug alsa_pcm_plugins_ladspa
alsa_pcm_plugins_lfloat alsa_pcm_plugins_linear alsa_pcm_plugins_meter
alsa_pcm_plugins_mulaw alsa_pcm_plugins_multi alsa_pcm_plugins_null
alsa_pcm_plugins_plug alsa_pcm_plugins_rate alsa_pcm_plugins_route
alsa_pcm_plugins_share alsa_pcm_plugins_shm alsa_pcm_plugins_softvol berkdb
bitmap-fonts cli cracklib crypt cups dri elibc_glibc fortran gdbm iconv
input_devices_evdev input_devices_keyboard input_devices_mouse isdnlog
kernel_linux lcd_devices_bayrad lcd_devices_cfontz lcd_devices_cfontz633
lcd_devices_glk lcd_devices_hd44780 lcd_devices_lb216 lcd_devices_lcdm001
lcd_devices_mtxorb lcd_devices_ncurses lcd_devices_text libg++ midi ncurses nls
nptl nptlonly pam pcre perl ppds pppd python readline reflection session spl
ssl tcpd truetype-fonts type1-fonts unicode userland_GNU video_cards_apm
video_cards_ark video_cards_ati video_cards_chips video_cards_cirrus
video_cards_cyrix video_cards_dummy video_cards_fbdev video_cards_glint
video_cards_i128 video_cards_i740 video_cards_i810 video_cards_imstt
video_cards_mga video_cards_neomagic video_cards_nsc video_cards_nv
video_cards_rendition video_cards_s3 video_cards_s3virge video_cards_savage
video_cards_siliconmotion video_cards_sis video_cards_sisusb video_cards_tdfx
video_cards_tga video_cards_trident video_cards_tseng video_cards_v4l
video_cards_vesa video_cards_vga video_cards_via video_cards_vmware
video_cards_voodoo xorg zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS,
LINGUAS, MAKEOPTS, PORTAGE_RSYNC_EXTRA_OPTS

(In reply to comment #0)
> I can forward the offending message to anyone who's interested.

Just attach is here?

Created an attachment (id=112837) [details]
The offending message

You may need to press "H" several times before Pine crashes (sometimes 3 times,
sometimes just once, in my testing).

I can't reproduce this inside screen, but I can reproduce it without screen. I
will look into it some more later.

Can you please try with pine-4.64-r5 (marked ~x86) ? I couldn't get it to crash
on the provided e-mail...

I can still reproduce it with pine-4.64-r5, although I have to press "H" more
times. If I hold down the H key, after about 30 cycles of enable/disable full
headers, Pine crashes.

I did see "*** glibc detected *** double free or corruption (!prev): 0x09003e90
***" on the screen when it crashed. I haven't noticed that before.

Stock Pine 4.64 does not crash even after holding down "H" for a long time
(perhaps 100 cycles).

First we need to figure out if this has been fixed in latest chappa-patch
patchset .I haven't updated the patch in few months. I'll add 4.64-r6 in next
day or two (need to upload versioned tarball with the patchset to our mirrors,
because upstream only provides unversioned download - this takes time until it
gets distributed to all mirrors).

Please give -r6 a try when you see it, and report back. I'll contact Eduard
Chappa if the bug is still there.

Please could you notify me when it's available? I've created a small script to
notify me when it appears, but of course I can't test it so I may miss it.
Thanks!

Sorry, I cannot reproduce with pine-4.64-r5 any more. I think that I made a
mistake when merging this package the first time (emerge install instead of
emerge merge) so I was still testing r3 when I thought I was testing r5.

4.64-r6 is in the tree, sorry for the delay.

If you say 4.64-r5 doesn't suffer from this bug, we better ask arch teams to
stabilize this version - it's been in the tree long enough.

Arch teams, please do your magic, thanks!

x86 stable

sparc stable.

emerges fine and works on amd64

Portage 2.1.2.2 (default-linux/amd64/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0,
2.6.20-beyond2 x86_64)
=================================================================
System uname: 2.6.20-beyond2 x86_64 AMD Athlon(tm) 64 X2 Dual Core Processor
4600+
Gentoo Base System release 1.12.9
Timestamp of tree: Wed, 21 Mar 2007 21:50:01 +0000
ccache version 2.4 [enabled]
dev-java/java-config: 1.3.7, 2.0.31
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.4-r6
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=k8 -O2 -pipe -msse3"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf
/etc/java-config/vms/ /etc/php/apache1-php5/ext-active/
/etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/
/etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/splash /etc/terminfo"
CXXFLAGS="-march=k8 -O2 -pipe -msse3"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig buildsyspkg ccache collision-protect distlocks
metadata-transfer multilib-strict parallel-fetch sandbox sfperms strict test"
GENTOO_MIRRORS="ftp://linux.rz.ruhr-uni-bochum.de/gentoo-mirror/
ftp://ftp.uni-erlangen.de/pub/mirrors/gentoo
ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo
ftp://ftp.wh2.tu-dresden.de/pub/mirrors/gentoo
ftp://ftp.join.uni-muenster.de/pub/linux/distributions/gentoo
ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
ftp://ftp.gentoo.mesh-solutions.com/gentoo/
ftp://pandemonium.tiscali.de/pub/gentoo/ "
LANG="en_US.ISO-8859-15"
LC_ALL="en_US.ISO-8859-15"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages
--filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage/overlay"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="X a52 aac acpi alsa amd64 amr audiofile berkdb bitmap-fonts bzip2 cairo
cdinstall cdr cli cracklib crypt cups dbus dri dts dvd dvdr dvdread eds emboss
encode fam firefox fortran gdbm gif gpm gstreamer gtk gtk2 hal iconv jpeg ldap
libg++ lirc logrotate mad midi mikmod mp3 mpeg ncurses nls nptl nptlonly
offensive ogg opengl pam pcre php png ppds pppd quicktime readline reflection
sdl session smp socks5 spl ssl svg symlink tcpd test tiff truetype
truetype-fonts type1-fonts unicode v4l vorbis x264 xinerama xorg xv xvid zlib"
ALSA_CARDS="emu10k1" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop
empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi
null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="evdev
keyboard" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216
lcdm001 mtxorb ncurses text" LIRC_DEVICES="inputlirc" USERLAND="GNU"
VIDEO_CARDS="nvidia"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, LINGUAS,
PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS

Adding ia64@ after talking to kloeri. Please, add the disappeared ~ia64 to
pine-4.64-r5, and a stable keyword later. Thanks!

ppc stable

~ia64 done.

Probably it was lost due to missing keyword in net-mail/iw-mailutils

Alpha done

Thanks, Raúl. Only amd64 is left.

amd64 stable, closing