[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Causing segmentations fault; Was: Re: No Public Key



On Mon, Nov 14, 2022 at 08:44:54PM -0000, Curt wrote:
> On 2022-11-14, <tomas@tuxteam.de> <tomas@tuxteam.de> wrote:
> >
> >> https://gitlab.com/muttmua/mutt/-/issues/428
> >
> > Is there a non-javascript-ey way to look at those issues?
> >
> 
> 
> Mutt crashes with SIGSEGV when uid -variable is NULL in pgp_gpgme_extrace_keys().
> 
> Found in Mutt 2.0.5 (Debian 11 + 2.0.5-4.1+deb11u1).
> 
> Reproducible in:
> 
> 2.1.4 (Ubuntu 22.04LTS + binary package 2.1.4-1ubuntu1.1)
> 2.2.6 (Debian 11 + 2.2.6 tarball)
> 2.2.7 (Debian 11 + stable git source)
> Public mailing list archive to problematic mail here (I can provide mbox file from my own archive).
> 
> Simple workaround (crypt-gpgme.c):
> 
> 2425       if (!more)
> 2426+      {
> 2427+        if ( uid == NULL )
> 2428+        {
> 2429+          err=1;
> 2430+          break;
> 2431+        }
> 2432         fprintf (*fp, "%s %5.5s %d/%8s %s %s\n", more ? "sub" : "pub",
> 2433                   gpgme_pubkey_algo_name (subkey->pubkey_algo), subkey->length,
> 2434                   shortid, date, uid->uid);
> 2435+      }
> 2436       else

Well... I've made a local mutt package with this applied, and I'll see
how it goes.  I didn't save any of the landmine emails, but I'm guessing
there'll be more.


Reply to: