innd crashes on Bytes header in feed

Boudewijn Visser visser at kabelfoon.nl
Mon Sep 20 21:24:19 UTC 1999


Hi,

I'm having the following problem with inn 2.2.1 (also seen with 2.2, and
even 1.7 ).

innd crashes (SEGV) when it is fed an article with the Bytes header.
I'm not sure if the Bytes header in the problem articles is correct
or not, but in either case it is IMHO a bug, as a program should
not crash on invalid input.

It happens both with a normal feed (IHAVE) and a streaming feed. 
(using innxmit host file-with-articles, not innfeed ).

My system is x86 Linux, running kernel 2.2.7 . inn 2.2.1 the release from 
isc.org, compiled with perl support (configure --with-perl )

The normal storage methode (/var/spool/<> ) is used, not cnfs. 
The crash happens directly after the body of the article is fed. 

[root at pii visser]# ~news/bin/innxmit -d -v localhost /home/visser/batch-crash 
< 200 pii InterNetNews server INN 2.2.1 25-Aug-1999 ready
>mode stream
< 203 StreamOK.
> check <nodup000b8d9b.71975044 at usw-ex0106-048.remarq.com>
< 238 <nodup000b8d9b.71975044 at usw-ex0106-048.remarq.com>
> takethis <nodup000b8d9b.71975044 at usw-ex0106-048.remarq.com>
> [ article 964 ]
> .
No reply to check, Illegal seek
Nothing sent -- leaving batchfile alone.
localhost stats offered 1 accepted 0 refused 0 rejected 0
localhost times user 0.010 system 0.000 elapsed 0.312

I'm not sure how the article got through in the first place, but perhaps
the problem occurs after some headers have been added like Xref .
(I suck news to one box, and then feed another. This is when I noticed it. )

Added is one article that causes innd to crash on my system.

I hope you can look into this. If more information is needed on my system,
or if I need to try some changes, please let me know. 

TIA, Regards, Boudewijn Visser
visser at kabelfoon.nl




-- Attached file included as plaintext by Listar --
-- Desc: posting-that-crashes-innd-986-bytes

Path: x86.local!news.tudelft.nl!delphi.et.tudelft.nl!akk.uni-karlsruhe.de!newsfeed01.btx.dtag.de!newsfeed.tli.de!newsfeed.berkeley.edu!remarQ73!supernews.com!remarQ.com!remarQ69!WReNclone!WReNphoon3.POSTED!WReN!not-for-mail
From: paul schell <dremptNOwwSPAM at netscape.net>
Subject: test
Newsgroups: nl.test
Message-ID: <nodup000b8d9b.71975044 at usw-ex0106-048.remarq.com>
Lines: 4
Bytes: 155
X-Originating-Host: 205.227.43.11
Organization: http://www.remarq.com: The World's Usenet/Discussions Start Here
X-Wren-Trace: eFh9VVRNCkALHF5VUAhNcUROXE5eXQhLE1pSTxEeEU0ZDEoOGEweGAUI
Date: Sat, 21 Aug 1999 19:01:43 +1700
NNTP-Posting-Host: 10.0.2.48
X-Complaints-To: wrenabuse at remarq.com
X-Trace: WReNphoon3 935287389 10.0.2.48 (Sat, 21 Aug 1999 19:03:09 PDT)
NNTP-Posting-Date: Sat, 21 Aug 1999 19:03:09 PDT
Xref: x86.local nl.test:12188

test

* Sent from RemarQ http://www.remarq.com The Internet's Discussion Network *
The fastest and easiest way to search and participate in Usenet - Free!





More information about the inn-bugs mailing list