#3530: Crash on search in IMAP(S) mailbox
----------------------+-----------------------------------------------------
 Reporter:  barsnick  |       Owner:  brendan
     Type:  defect    |      Status:  new    
 Priority:  major     |   Milestone:         
Component:  IMAP      |     Version:  1.5.21 
 Keywords:            |  
----------------------+-----------------------------------------------------

Comment(by brendan):

 Possibly it's just some slight inconsistency between the debugging info
 and an optimized build? And `headers[1] == NULL` shouldn't cause a crash,
 since `FREE` expands to `safe_free`, which doesn't call `free` if the
 value is `NULL`.

 This is a strange bug: I don't see how the `tagbuf` is ever invalid in the
 first crash, and I don't see how `siz` could be zero in the call to
 `safe_realloc` in the second one.

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3530#comment:2>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to