Report forwarded to debian-bugs-dist@lists.debian.org, Matthew Vernon <matthew@debian.org>:
Bug#50527; Package trn.   debian-bugs-dist@lists.debian.orgMatthew Vernon  Subject: Bug#50527: trn: bug in the % interpolation code... Reply-To: pmaydell@chiark.greenend.org.uk, 50527@bugs.debian.org Resent-From: pmaydell@chiark.greenend.org.uk Orignal-Sender: pm215@watchdragon.demon.co.uk Resent-To: debian-bugs-dist@lists.debian.org Resent-CC: Matthew Vernon Resent-Date: Thu, 18 Nov 1999 10:33:01 GMT Resent-Message-ID: Resent-Sender: owner@bugs.debian.org X-Debian-PR-Message: report 50527 X-Debian-PR-Package: trn X-Debian-PR-Keywords: X-Loop: owner@bugs.debian.org Received: via spool by bugs@bugs.debian.org id=B.94292080923540 (code B ref -1); Thu, 18 Nov 1999 10:33:01 GMT To: submit@bugs.debian.org From: pmaydell@chiark.greenend.org.uk Date: Thu, 18 Nov 1999 00:10:44 +0000 Sender: pm215@watchdragon.demon.co.uk Message-Id: Package: trn Version: 3.6-12 [ This would appear to have been fixed in trn4, but since Debian provides trn3.6 I'm going to report this bug anyway :-> ] If you attempt to use the following MAILHEADER environment variable with trn, then when you reply (R) to the message the headers have a random line from your enviroment appended just before the 'in article foo' line... mnementh$ export MAILHEADER='To: %t Subject: %(%i=^$?:Re: %S %(%{REPLYTO}=^$:Reply-To: %{REPLYTO} )Newsgroups: %n In-Reply-To: %i) %(%[references]=^$?:References: %[references] )Organization: %o Cc: Bcc: \n\n' I've run trn through a debugger, and this is occurring because the code that parses strings and does %-interpolation is at some point stepping its pointer into the string off the end... Since Linux stores the environment as 'var=value\0var=value\0...' the interpolation code winds up adding the next var=value string in the environment after MAILHEADER. I suspect this MAILHEADER of actually being buggy (which is odd, because it's what the manpage claims is the default, modulo typos). In any case, trn shouldn't walk off the end of the MAILHEADER environment string -- this could theoretically be a segfault on platforms which implement getenv differently... Peter Maydell   Acknowledgement sent to pmaydell@chiark.greenend.org.uk:
New Bug report received and forwarded. Copy sent to Matthew Vernon <matthew@debian.org>.   -t  From: owner@bugs.debian.org (Debian Bug Tracking System) To: pmaydell@chiark.greenend.org.uk Subject: Bug#50527: Acknowledgement (trn: bug in the % interpolation code...) Message-ID: In-Reply-To: References: X-Debian-PR-Message: ack 50527 Thank you for the problem report you have sent regarding Debian. This is an automatically generated reply, to let you know your message has been received. It is being forwarded to the developers mailing list for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): Matthew Vernon If you wish to submit further information on your problem, please send it to 50527@bugs.debian.org (and *not* to bugs@bugs.debian.org). Please do not reply to the address at the top of this message, unless you wish to report a problem with the Bug-tracking system. Darren Benham (administrator, Debian Bugs database)   Received: (at submit) by bugs.debian.org; 18 Nov 1999 10:26:49 +0000 Received: (qmail 23524 invoked from network); 18 Nov 1999 10:26:49 -0000 Received: from finch-post-10.mail.demon.net (194.217.242.38) by master.debian.org with SMTP; 18 Nov 1999 10:26:49 -0000 Received: from watchdragon.demon.co.uk ([158.152.121.201]) by finch-post-10.mail.demon.net with esmtp (Exim 2.12 #1) id 11oOm3-0002AL-0A for submit@bugs.debian.org; Thu, 18 Nov 1999 10:26:44 +0000 Received: from localhost (mnementh.local) [127.0.0.1] by watchdragon.demon.co.uk with esmtp (Exim 3.03 #1) id 11oF9w-0001qf-00 (Debian); Thu, 18 Nov 1999 00:10:44 +0000 To: submit@bugs.debian.org From: pmaydell@chiark.greenend.org.uk Subject: trn: bug in the % interpolation code... Date: Thu, 18 Nov 1999 00:10:44 +0000 Sender: pm215@watchdragon.demon.co.uk Message-Id: Package: trn Version: 3.6-12 [ This would appear to have been fixed in trn4, but since Debian provides trn3.6 I'm going to report this bug anyway :-> ] If you attempt to use the following MAILHEADER environment variable with trn, then when you reply (R) to the message the headers have a random line from your enviroment appended just before the 'in article foo' line... mnementh$ export MAILHEADER='To: %t Subject: %(%i=^$?:Re: %S %(%{REPLYTO}=^$:Reply-To: %{REPLYTO} )Newsgroups: %n In-Reply-To: %i) %(%[references]=^$?:References: %[references] )Organization: %o Cc: Bcc: \n\n' I've run trn through a debugger, and this is occurring because the code that parses strings and does %-interpolation is at some point stepping its pointer into the string off the end... Since Linux stores the environment as 'var=value\0var=value\0...' the interpolation code winds up adding the next var=value string in the environment after MAILHEADER. I suspect this MAILHEADER of actually being buggy (which is odd, because it's what the manpage claims is the default, modulo typos). In any case, trn shouldn't walk off the end of the MAILHEADER environment string -- this could theoretically be a segfault on platforms which implement getenv differently... Peter Maydell   Information forwarded to debian-bugs-dist@lists.debian.org, Matthew Vernon <matthew@debian.org>:
Bug#50527; Package trn.   debian-bugs-dist@lists.debian.orgMatthew Vernon  X-Loop: owner@bugs.debian.org Subject: Bug#50527: Get well hung here Reply-To: goeson , 50527@bugs.debian.org Resent-From: goeson Resent-To: debian-bugs-dist@lists.debian.org Resent-CC: Matthew Vernon Resent-Date: Thu, 04 Sep 2008 19:51:16 +0000 Resent-Message-ID: Resent-Sender: owner@bugs.debian.org X-Debian-PR-Message: followup 50527 X-Debian-PR-Package: trn X-Debian-PR-Keywords: X-Debian-PR-Source: trn Received: via spool by 50527-submit@bugs.debian.org id=B50527.12205576981008 (code B ref 50527); Thu, 04 Sep 2008 19:51:16 +0000 Received: (at 50527) by bugs.debian.org; 4 Sep 2008 19:48:18 +0000 X-Spam-Checker-Version: SpamAssassin 3.2.3-bugs.debian.org_2005_01_02 (2007-08-08) on rietz.debian.org X-Spam-Level: ** X-Spam-Status: No, score=2.6 required=4.0 tests=FH_HELO_EQ_D_D_D_D, HELO_DYNAMIC_IPADDR,MDO_DATING2,RDNS_DYNAMIC autolearn=no version=3.2.3-bugs.debian.org_2005_01_02 Received: from rrcs-70-63-105-98.midsouth.biz.rr.com ([70.63.105.98]) by rietz.debian.org with esmtp (Exim 4.63) (envelope-from ) id 1KbKoU-0008LX-64 for 50527@bugs.debian.org; Thu, 04 Sep 2008 19:48:18 +0000 Message-ID: <1FBC2D51.BC144A71@TravisandCompany.com> Date: Thu, 4 Sep 2008 15:48:08 -0400 From: goeson User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: 50527@bugs.debian.org Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Rev your lovemaking life up a few notches http://www.needpass.com/
  Acknowledgement sent to goeson <hook-sha_1975@TravisandCompany.com>:
Extra info received and forwarded to list. Copy sent to Matthew Vernon <matthew@debian.org>.   -t  Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.420 (Entity 5.420) Content-Type: text/plain; charset=utf-8 X-Loop: owner@bugs.debian.org From: owner@bugs.debian.org (Debian Bug Tracking System) To: goeson Subject: Bug#50527: Info received (Get well hung here) Message-ID: References: <1FBC2D51.BC144A71@TravisandCompany.com> X-Debian-PR-Message: ack-info 50527 X-Debian-PR-Package: trn X-Debian-PR-Source: trn Reply-To: 50527@bugs.debian.org Thank you for the additional information you have supplied regarding this Bug report. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): Matthew Vernon If you wish to submit further information on this problem, please send it to 50527@bugs.debian.org, as before. Please do not send mail to owner@bugs.debian.org unless you wish to report a problem with the Bug-tracking system. --=20 50527: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D50527 Debian Bug Tracking System Contact owner@bugs.debian.org with problems   Received: (at 50527) by bugs.debian.org; 4 Sep 2008 19:48:18 +0000 From hook-sha_1975@TravisandCompany.com Thu Sep 04 19:48:18 2008 X-Spam-Checker-Version: SpamAssassin 3.2.3-bugs.debian.org_2005_01_02 (2007-08-08) on rietz.debian.org X-Spam-Level: ** X-Spam-Status: No, score=2.6 required=4.0 tests=FH_HELO_EQ_D_D_D_D, HELO_DYNAMIC_IPADDR,MDO_DATING2,RDNS_DYNAMIC autolearn=no version=3.2.3-bugs.debian.org_2005_01_02 Return-path: Received: from rrcs-70-63-105-98.midsouth.biz.rr.com ([70.63.105.98]) by rietz.debian.org with esmtp (Exim 4.63) (envelope-from ) id 1KbKoU-0008LX-64 for 50527@bugs.debian.org; Thu, 04 Sep 2008 19:48:18 +0000 Message-ID: <1FBC2D51.BC144A71@TravisandCompany.com> Date: Thu, 4 Sep 2008 15:48:08 -0400 From: goeson User-Agent: Thunderbird 2.0.0.14 (Windows/20080421) MIME-Version: 1.0 To: 50527@bugs.debian.org Subject: Get well hung here Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Rev your lovemaking life up a few notches http://www.needpass.com/