tags 716149 + upstream forwarded 716149 https://sourceforge.net/p/pmt/bugs/60/ thanks
I looked into this bug a little. It boils down to failure to check for the end of `argv`; the provided test case fingers only one of several different places where this check is missing. I have sent the bug report on to upstream, with more detail. I do not think this is an *exploitable* crash, since the kernel guarantees argv[argc] will be a null pointer, and arguments appear always to be read in sequence. zw -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
