Package: mutt-patched
Version: 1.5.21-5+b1
Severity: normal
Dear Maintainer,
Mutt consistently crashes under the following steps:
1) First enable message header editing:
:set edit_headers
2) Type 'm' to create an e-mail (enter an e-mail address and subject)
3) Include the following two attachments (via the Attach pseudo header):
Attach: /tmp/foo
Attach: /tmp/bar
(I'm assuming both files exist)
4) Save the message and exit the editor, returning to the Attachment menu
5) Delete the newly added attachments (foo and bar) by pressing D twice
6) Press 'e' to edit the message
7) Go to step 3 until Mutt crashes (usually once or twice)
Attached are two backtrace logs.
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-2-amd64 (SMP w/12 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages mutt-patched depends on:
ii libc6 2.13-33
ii libcomerr21.42.2-2
ii libgnutls26 2.12.19-1
ii libgpg-error0 1.10-3
ii libgpgme111.2.0-1.4
ii libgssapi-krb5-2 1.10.1+dfsg-1
ii libidn11 1.25-2
ii libk5crypto3 1.10.1+dfsg-1
ii libkrb5-3 1.10.1+dfsg-1
ii libncursesw5 5.9-8
ii libsasl2-22.1.25.dfsg1-4+b1
ii libtinfo5 5.9-8
ii libtokyocabinet9 1.4.47-2
ii mutt 1.5.21-5+b1
mutt-patched recommends no packages.
mutt-patched suggests no packages.
--
Douglas A. Augusto
% gdb /usr/bin/mutt
GNU gdb (GDB) 7.4.1-debian
Copyright (C) 2012 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type show copying
and show warranty for details.
This GDB was configured as x86_64-linux-gnu.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/...
Reading symbols from /usr/bin/mutt...Reading symbols from
/usr/lib/debug/usr/bin/mutt-patched...done.
done.
(gdb) run
Starting program: /usr/bin/mutt
[Thread debugging using libthread_db enabled]
Using host libthread_db library /lib/x86_64-linux-gnu/libthread_db.so.1.
Program received signal SIGSEGV, Segmentation fault.
cum_attachs_size (menu=optimized out) at ../compose.c:396
396 ../compose.c: No such file or directory.
(gdb) bt
#0 cum_attachs_size (menu=optimized out) at ../compose.c:396
#1 compose_format_str (buf=0x7fffa160 , buflen=1024, col=37,
op=optimized out, src=0x768737Atts: %a]%-, prefix=optimized out,
ifstring=0x7fffa9e0 , elsestring=0x7fffaa60 , data=15576352,
flags=0) at ../compose.c:446
#2 0x00476b59 in mutt_FormatString (dest=0x7fffafc0 -- Mutt:
Compose [Approx. msg size: 0.1K Atts: 1], '-' repeats 82 times,
destlen=1023,
col=37, src=optimized out, callback=0x419760 compose_format_str,
data=15576352, flags=0) at ../muttlib.c:1426
#3 0x00419bef in compose_status_line (p=optimized out,
menu=optimized out, col=0, buflen=1024,
buf=0x7fffafc0 -- Mutt: Compose [Approx. msg size: 0.1K Atts: 1],
'-' repeats 82 times) at ../compose.c:475
#4 mutt_compose_menu (msg=0x164b580, fcc=optimized out, fcclen=256, cur=0x0)
at ../compose.c:1274
#5 0x00463770 in ci_send_message (flags=0, msg=0x164b580,
tempfile=optimized out, ctx=optimized out, cur=0x0) at ../send.c:1533
#6 0x00423dcd in mutt_index_menu () at ../curs_main.c:2008
#7 0x00408c5d in main (argc=1, argv=0x7fffe2e8) at ../main.c:1026
(gdb) bt full
#0 cum_attachs_size (menu=optimized out) at ../compose.c:396
s = optimized out
i = optimized out
idx = 0x105d740
info = 0x2
b = optimized out
#1 compose_format_str (buf=0x7fffa160 , buflen=1024, col=37,
op=optimized out, src=0x768737Atts: %a]%-, prefix=optimized out,
ifstring=0x7fffa9e0 , elsestring=0x7fffaa60 , data=15576352,
flags=0) at ../compose.c:446
fmt = %s, '\000' repeats 38 times,
̠\377\377\377\177\000\000\020b\360\365\377\177\000\000
ln\000\000\000\000\000\064\207v\000\000\000\000\000F\207v\000\000\000\000\000\340\252\377\377\377\177\000\000\313\060\367\365\377\177\000\000\000\000\000\000\000\000\000\000\001,
'\000' repeats 22 times
tmp =
Р\377\377\377\177\000\000Р\377\377\377\177\000\000\001\000\000\000\001\000\000\000\001\000\000\000\000\000\000\000\300\240\377\377\377\177,
'\000' repeats 26 times, 5\207v, '\000' repeats 29 times,
4\207v\000\000\000\000\000\034\253\377\377\377\177\000\000$\000\000\000\000\000\000\000\377\003\000\000\000\000\000
optional = 0
menu = 0xedad20
#2 0x00476b59 in mutt_FormatString (dest=0x7fffafc0 -- Mutt:
Compose [Approx. msg size: 0.1K Atts: 1], '-' repeats 82 times,
