> I've tracked it down to this hunk:
>
> +#ifdef USE_ICONV /* we've copied this string */
> +  slrn_free (h->from);
> +#endif
>
> This triggers a double free. With "slrn_free (h->from);" removed slrn
> works w/o segfaults.

Yes, that's what I expected.  However, simply removing the slrn_free()
will result in lots of memleaks.
I'm not sure what is happening, because the h->from is explicitly malloced
in process_xover(), which is also the only place in the source (afaics)
where any Slrn_Header_Type is malloced.
So, the only thing I can think of is that slrn messes with the from field
somewhere lese in the code.  I'll try looking into it later today...

-- 
Bas Zoetekouw

Reply via email to