#3531: Replying to an address with a trailing colon crashes mutt
---------------------+----------------------
  Reporter:  bruno   |      Owner:  me
      Type:  defect  |     Status:  assigned
  Priority:  minor   |  Milestone:
 Component:  mutt    |    Version:  1.5.21
Resolution:          |   Keywords:
---------------------+----------------------

Comment (by me):

 The problem is in rfc822_cpy_adr().  When prune=1, and there is a group at
 the end of the list, addr is advanced to the next element of the list,
 leaving addr==NULL.  The crash occurs at the end of the for-loop when
 `addr=addr->next` is executed.

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3531#comment:5>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

Reply via email to