[bug-mailutils] /usr/bin/mail segfaults when tab-completing after "cd x"

[Daniel Kahn Gillmor]

Hi Folks--

I'm using debian's mailutils version 0.6.94-1, and i found the
following misbehavior.  It's currently filed as debian bug 379156 [0],
if you care to followup there.

i can reliably make GNU mailutils segfault when reading mail from a
simple mbox.  It probably segfaults in many more circumstances, but
this is the simplest way i've found to do it:

Make an mbox with a single message in it, and view it with
/usr/bin/mail.

At the first prompt, type "cd x" and hit tab.  you will get a
segmentation fault:

[0 address@hidden tmp.UoUsZ25790]$ cat >example <<EOF
> From - Fri Jul 21 09:35:47 2006
> Subject: example simple mbox
> From: Daniel Kahn Gillmor <address@hidden>
> To: Daniel Kahn Gillmor <address@hidden>
> Date: Fri, 21 Jul 2006 14:40:38 -0400
> 
> Here is the message body
> 
> 
> EOF
[0 address@hidden tmp.UoUsZ25790]$ mail -f example 
"/tmp/tmp.UoUsZ25790/example": 1 message 1 new
>N   1 Daniel Kahn Gillmo Fri Jul 21 09:35   7/214   example simple mbox
& cd xSegmentation fault
[139 address@hidden tmp.UoUsZ25790]$ 

I have not had a chance to debug this further yet, but will happily
provide more information if it would help resolve the problem.

        --dkg


[0] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=379156