Segmentation fault triggered by invalid data

[TAKAHASHI Tamotsu]

Note: Probably this is not a bug of ncurses. I report
this only in case you are interested in any segmentation
fault in ncurses. Please ignore this if you think ncurses
could be killed by a bogus application and bogus data.


I experimented a modified version of urlview:
http://www.momonga-linux.org/~tamo/urlview-0.9.x.tar.bz2
This works well if you set $pipe_decode in your muttrc.
The bug I'm reporting occured when I unset it.

When I built urlview with S-Lang (UTF), it showed me
something, even if invalid data was given.
For example, these commands
        export LANG=ja_JP.EUC-JP # or ja_JP.UTF-8
        zcat spam.txt.gz | urlview
displayed something meaningless:
        -> 1 http://www.plala.or.jp/)$B$G$b:G?7(B
           2 http://www.plala.or.jp/access/living/shogai/
           3 http://www.plala.or.jp/i/
(spam.txt.gz is attached.)

But it dumped core when I built it with ncurses-
5.4-20050326.




gdb said:

Reading symbols from shared object read from target memory...done.
Loaded system supplied DSO at 0xffffe000
Core was generated by `./urlview'.
Program terminated with signal 11, Segmentation fault.

warning: svr4_current_sos: Can't read pathname for load map:
Input/output error

Reading symbols from /usr/lib/libncursesw.so.5...done.
Loaded symbols for /usr/lib/libncursesw.so.5
Reading symbols from /lib/tls/libc.so.6...done.
Loaded symbols for /lib/tls/libc.so.6
Reading symbols from /lib/libdl.so.2...done.
Loaded symbols for /lib/libdl.so.2
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Reading symbols from /lib/libnss_files.so.2...done.
Loaded symbols for /lib/libnss_files.so.2
Reading symbols from /usr/lib/gconv/EUC-JP.so...done.
Loaded symbols for /usr/lib/gconv/EUC-JP.so
Reading symbols from /usr/lib/gconv/libJIS.so...done.
Loaded symbols for /usr/lib/gconv/libJIS.so
#0  0xb7f93228 in _nc_waddch_nosync () from /usr/lib/libncursesw.so.5
(gdb) bt
#0  0xb7f93228 in _nc_waddch_nosync () from /usr/lib/libncursesw.so.5

-- 
tamo

spam.txt.gz
Description: GNU Zip compressed data