Mailing List Archive

[Bug 2933] segfault in string expansion
https://bugs.exim.org/show_bug.cgi?id=2933

Jeremy Harris <jgh146exb@wizmail.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
Assignee|unallocated@exim.org |jgh146exb@wizmail.org
CC| |victor@corvax.kiev.ua

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2933] segfault in string expansion [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2933

--- Comment #1 from Jeremy Harris <jgh146exb@wizmail.org> ---
#0 0x00007f7e7b369415 in __memmove_evex_unaligned_erms () from
/lib64/libc.so.6
#1 0x0000563ffd485c3c in string_catn (g=0x563ffe3276a8, s=0x0, count=3) at
string.c:1194
#2 0x0000563ffd42c31a in expand_string_internal (string=<optimized out>,
flags=flags@entry=3, left=left@entry=0x7fff6cd99b68,
resetok_p=resetok_p@entry=0x7fff6cd99f6c, textonly_p=textonly_p@entry=0x0)
at expand.c:4678
#3 0x0000563ffd434e86 in process_yesno (flags=0, flags@entry=2, yes=1,
save_lookup=0x0, sptr=sptr@entry=0x7fff6cd9a080,
yieldptr=yieldptr@entry=0x7fff6cd9a088, type=type@entry=0x563ffd4f03bf
"if", resetok=0x7fff6cd99f6c) at expand.c:3699
#4 0x0000563ffd42c7a8 in expand_string_internal
(string=string@entry=0x563ffe32ce48 "${if
match{abc}{\\N^(\\S+)\\s*(\\S.+)*$\\N}{$2}{}}",
flags=flags@entry=2, left=left@entry=0x0, resetok_p=resetok_p@entry=0x0,
textonly_p=textonly_p@entry=0x0) at expand.c:4837
#5 0x0000563ffd43495a in expand_string_2 (string=string@entry=0x563ffe32ce48
"${if match{abc}{\\N^(\\S+)\\s*(\\S.+)*$\\N}{$2}{}}",
textonly_p=textonly_p@entry=0x0) at expand.c:8410
#6 0x0000563ffd42b9fd in expand_string (string=string@entry=0x563ffe32ce48
"${if match{abc}{\\N^(\\S+)\\s*(\\S.+)*$\\N}{$2}{}}")
at expand.c:8424
#7 0x0000563ffd41e344 in expansion_test_line (line=line@entry=0x7fff6cddc1dd
"${if match{abc}{\\N^(\\S+)\\s*(\\S.+)*$\\N}{$2}{}}")
at exim.c:1676

The internal for $2 is a null pointer. Looks like PCRE2 can return that for a
subgroup that "works" but has no value.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2933] segfault in string expansion [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2933

--- Comment #2 from Andreas Metzler <eximusers@bebt.de> ---
Hello,

the related commits e63825824cc406c160ccbf2b154c5d81b168604a and
7ad1a2b2cc57b5f4bcb59186a9a8abcbed9f4f76 refer to "Broken-by: 59d66fdc13f0",
however I failed to find 59d66fdc13f0 in git history.

cu Andreas

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2933] segfault in string expansion [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2933

--- Comment #3 from Jeremy Harris <jgh146exb@wizmail.org> ---
I wonder where I copy-pasted that from?
It should have said 22ed7a5295f1.

Apologies for the confusion.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##