INN 2.4.0 dumps core on Solaris 9

[Nathan Coraor]

"Russ Allbery" said:
> 
> Someone's trying to feed you a message that doesn't have a message ID.
> Sorry, I should have thought of that; I thought you were segfaulting
> before the server came all the way up.  This is a bug in INN 2.4.0 that's
> fixed in current STABLE snapshots and will be fixed in INN 2.4.1; the
> easiest thing to do is probably to switch to a STABLE snapshot from
> <ftp://ftp.isc.org/isc/inn/snapshots/>.  A STABLE snapshot will correctly
> reject such articles as malformed.
> 
> I really need to get INN 2.4.1 out....
> 
  
  I got STABLE-20031026 and have run into the same problem...

  15182/1:        llseek(39, 0, SEEK_CUR)                         = 232
  15182/1:        pwrite64(38, "\0\0\0\0\0\0\0\0\0\0\0E8".., 40, 5120) = 40
  15182/1:        memcntl(0xFEE38000, 8192, MC_SYNC, MS_ASYNC, 0, 0) = 0
  15182/1:        fcntl(10, F_SETLKW64, 0xFFBFF178)               = 0
  15182/1:            Incurred fault #6, FLTBOUNDS  %pc = 0xFEFB3464
  15182/1:              siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
  15182/1:            Received signal #11, SIGSEGV [default]
  15182/1:              siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
  15184:  read(0, 0x0025A69C, 8192)                       = 0
  15184:  llseek(4, 0, SEEK_CUR)                          Err#29 ESPIPE
  15184:  close(4)                                        = 0

  (gdb) bt
  #0  0xfefb3464 in strlen () from /usr/lib/libc.so.1
  #1  0x0008b08c in HashMessageID (MessageID=0x0) at hash.c:68
  #2  0x00086bd0 in hisv6_write (history=0x294df0, key=0x0, arrived=1067206081, 
      posted=1066840133, expires=0, token=0xffbff488) at hisv6/hisv6.c:852
  #3  0x000852fc in HISwrite (h=0x291828, key=0x0, arrived=1067206081,
      posted=1066840133, expires=0, token=0xffbff488) at his.c:265
  #4  0x0006b8c0 in InndHisWrite (key=0x0, arrived=1067206081,
      posted=1066840133, expires=0, token=0xffbff488) at util.c:356
  #5  0x00051f14 in ARTpost (cp=0x2a6158) at art.c:2330
  #6  0x0005a908 in NCpostit (cp=0x2a6158) at nc.c:196
  #7  0x0005c474 in NCproc (cp=0x2a6158) at nc.c:985
  #8  0x0005cc10 in NCreader (cp=0x2a6158) at nc.c:1188
  #9  0x00057ec8 in CHANreadloop () at chan.c:1062
  #10 0x0005a268 in main (ac=1, av=0xffbffddc) at innd.c:666

Thanks,
--nate

--------
nathan coraor
cse it support
nate at cse.psu.edu