#3588: r6214 makes Mutt crash
---------------------+------------------------------------------------------
 Reporter:  vinc17   |       Owner:  mutt-dev
     Type:  defect   |      Status:  new     
 Priority:  blocker  |   Milestone:  1.6     
Component:  mutt     |     Version:          
 Keywords:           |  
---------------------+------------------------------------------------------

Comment(by vinc17):

 In mutt_buffer_new, mutt_buffer_init is invoked with uninitialized
 contents of b. So, the "FREE(&b->data);" in mutt_buffer_init yields
 undefined behavior.

 How about replacing "mutt_buffer_init(b);" by "memset(b, 0,
 sizeof(BUFFER));"? Or just replace safe_malloc + mutt_buffer_init by
 safe_calloc so that the memory is initialized to 0 there?

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3588#comment:2>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to