Bug#183781: Netscape 4.8 exits with SEGV replying to certain msgs

[Paolo P.(Gabel - ) <gabel@gabel.it>]

Package: libc6
Version: 2.1.3-24
Severity: grave



-- System Information
Debian Release: 2.2
Architecture: i386
Kernel: Linux comix 2.2.23 #1 Wed Feb 19 17:05:29 CET 2003 i686

Versions of packages libc6 depends on:
ii  ldso                          1.9.11-9   The Linux dynamic linker, library 

Note severity: can no more use NS-Mail (at least to reply to/fwd those
	msgs).  

Here's what happens:
- got msgs (from MS-Compose/MS-Outlook) with body in both text+html 
- Netscape/Communicator 4.8 opens them with no problems
- but if I 'Reply' to such msgs I get SIGSEGV from libc6 (see below).
- this did not happen before upgrading to libc6 2.1.3-24 (not sure exactly
  which subver was)
- it doesn't happen either on Woody, libc6 2.2.5-14.3
- happens also wuth prev vers of kernel

 
=== gdb trace ===

gdb /usr/local/netscape/netscape
...
(gdb) set args -mail
(gdb) set environment MOZILLA_HOME=/usr/local/netscape
(gdb) run
Starting program: /usr/local/netscape/netscape -mail
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...(no debugging symbols found)...
(no debugging symbols found)...
Program received signal SIGSEGV, Segmentation fault.
0x88dbe10 in XmTextSetHighlight ()
   from /usr/local/netscape/plugins/libnullplugin.so
***
*** NOTE: removing libnullplugin.so the same happens but with
***       XmTextSetHighlight () called from next plugin in list
***  	  (libflashplayer.so in my case)
***
(gdb) where
#0  0x88dbe10 in XmTextSetHighlight ()
   from /usr/local/netscape/plugins/libnullplugin.so
#1  0x8354da9 in XFE_TextSpellCheck::IgnoreHilitedText ()
   from /usr/local/netscape/plugins/libnullplugin.so
#2  0x401fe7a8 in fwrite () from /lib/libc.so.6
#3  0x8857215 in XP_FileWrite ()
   from /usr/local/netscape/plugins/libnullplugin.so
#4  0x83be9bc in TXFE_DisplaySubDoc ()
   from /usr/local/netscape/plugins/libnullplugin.so
#5  0x83bea36 in TXFE_DisplaySubDoc ()
   from /usr/local/netscape/plugins/libnullplugin.so
#6  0x83bed07 in TXFE_FinishedLayout ()
   from /usr/local/netscape/plugins/libnullplugin.so
#7  0x843aeb0 in lo_FinishLayout ()
   from /usr/local/netscape/plugins/libnullplugin.so
#8  0x843b251 in LO_ProcessTag ()
   from /usr/local/netscape/plugins/libnullplugin.so
#9  0x8457f1c in EDT_ProcessTag ()
   from /usr/local/netscape/plugins/libnullplugin.so
#10 0x84b1f3d in PA_MDLAbort ()
   from /usr/local/netscape/plugins/libnullplugin.so
#11 0x843c443 in lo_InternalDiscardDocument ()
   from /usr/local/netscape/plugins/libnullplugin.so
#12 0x843cda1 in LO_DiscardDocument ()
   from /usr/local/netscape/plugins/libnullplugin.so
#13 0x83be172 in TXFE_AllConnectionsComplete ()
   from /usr/local/netscape/plugins/libnullplugin.so
#14 0x83da883 in NET_PrintNetlibStatus ()
   from /usr/local/netscape/plugins/libnullplugin.so
#15 0x83dd38c in NET_ProcessNet ()
   from /usr/local/netscape/plugins/libnullplugin.so
#16 0x82bd499 in fe_EventLoop ()
   from /usr/local/netscape/plugins/libnullplugin.so
#17 0x82bfe55 in main () from /usr/local/netscape/plugins/libnullplugin.so
#18 0x401cea42 in __libc_start_main () from /lib/libc.so.6

=== end gdb trace ===