Bug#4553: INN crashes

[Rob Leslie <rob@mars.org>]

Package: inn
Version: 1.4unoff4-1

Recently our news server has begun to crash on a fairly regular basis. It
leaves behind the following core file:

-rw-r--r--   1 news     news     28004352 Sep 19 18:04 /var/spool/news/core

dalesbred:/var/spool/news:[34]% gdb =innd core
GDB is free software and you are welcome to distribute copies of it
 under certain conditions; type "show copying" to see the conditions.
There is absolutely no warranty for GDB; type "show warranty" for details.
GDB 4.15.1 (i486-linux), Copyright 1995 Free Software Foundation, Inc...
(no debugging symbols found)...
Core was generated by `/usr/sbin/innd -p4 -r -i0 -l0'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libc.so.5.2.18...(no debugging symbols found)...done.
Reading symbols from /lib/ld-linux.so.1...(no debugging symbols found)...done.
#0  0x40027b62 in _free_internal ()
(gdb) bt
#0  0x40027b62 in _free_internal ()
#1  0x40088c54 in __shtab ()
#2  0x706d6172 in __ypbindlist ()
#3  0x80c2060 in __ctype_tolower ()
Cannot access memory at address 0x6e6f2e73.
(gdb) 

The stack trace has been identical in each crash.

Any ideas?

-- 
Robert Leslie
rob@mars.org