I sent this to nmh-bugs.  Just in case that is a black hole with
no readers, I am also forwarding it to nmh-workers.

 -NWR

------- Forwarded Message

Date:    Mon, 06 Mar 2000 12:04:21 -0600
From:    Neil W Rickert <[EMAIL PROTECTED]>
To:      [EMAIL PROTECTED]
Subject: Re: Bug in msh.c 

This is a multipart MIME message.

- --==_Exmh_-15175783520
Content-Type: text/plain; charset=us-ascii

Neil W Rickert <[EMAIL PROTECTED]> wrote:

>I finally tracked down the problem in msh that was causing errors
>whenever I tried to examine a 'mmdf' style mailbox.

>It turns out that not enough memory was being allocated with
>calloc(), causing memory pointers to be overwritten and corrupted.

>Patch attached.

On second thoughts, use the patch attached to this message rather
than the earlier one.  It should be better for future maintenance,
although it is equivalent in effect.

 -NWR


- --==_Exmh_-15175783520
Content-Type: text/plain ; name="patch"; charset=us-ascii
Content-Description: patch
Content-Disposition: attachment; filename="patch"

- --- msh.c     2000/03/06 16:41:18     1.1
+++ msh.c       2000/03/06 17:54:28
@@ -754,7 +754,7 @@
     if (!(mp = (struct msgs  *) calloc ((size_t) 1, sizeof(*mp))))
        padios (NULL, "unable to allocate folder storage");
 
- -    if (!(mp->msgstats = calloc ((size_t) 1, msgp + 3)))
+    if (!(mp->msgstats = calloc ((size_t) msgp + 3, sizeof(*(mp->msgstats)))))
        padios (NULL, "unable to allocate message status storage");
 
     mp->hghmsg = msgp;

- --==_Exmh_-15175783520--


------- End of Forwarded Message

Reply via email to