Router segfaults

[Eino Tuominen <eino@utu.fi>]

Hi all!

I'm running now Zmailer 2.99.51 and I noticed that one kind of messages
causes router to segfault. Zmailer is running on Solaris 2.6.


# alya:/var/spool/postoffice/router> /opt/mail/bin/router -i
ZMailer router (2.99.51 #1: Thu Aug  5 16:46:54 EET DST 1999)
  eino@bellatrix:/opt/src/zmailer-2.99.51/router
Copyright 1992 Rayan S. Zachariassen
Copyright 1992-1999 Matti Aarnio
Configured with command: 'CC='cc' CFLAGS='' ./configure  --prefix=/opt/mail --with-openssl-prefix=/opt/openssl --with-logdir=/var/log/mail'

z# rtrace
 lapply('PS1', ())
z# process 17401-1617
    process 17401-1617
        db flush pwuid
        db flush pwnam
        db flush fullname
        db flush hostexpansions
        db flush recipients
        LOGMSG=''
        rfc822 17401-1617
Segmentation Fault
# alya:/var/spool/postoffice/router> 

Output of truss:

8628:   read(0, 0x000D3427, 1024)       (sleeping...)
8628:   read(0, " p r o c e s s   1 7 4 0".., 1024)     = 19
8628:   write(2, "         p r o c e s s", 11)          = 11
8628:   write(2, "   1 7 4 0 1 - 1 6 1 7", 11)          = 11
8628:   write(2, "\n", 1)                               = 1
8628:   write(2, "                 d b   f".., 23)      = 23
8628:   write(2, "                 d b   f".., 23)      = 23
8628:   write(2, "                 d b   f".., 26)      = 26
8628:   write(2, "                 d b   f".., 32)      = 32
8628:   write(2, "                 d b   f".., 28)      = 28
8628:   write(2, "                 L O G M".., 18)      = 18
8628:   write(2, "                 r f c 8".., 26)      = 26
8628:   open("17401-1617", O_RDONLY)                    = 4
8628:   time()                                          = 934367108
8628:   fstat(4, 0x000D60E0)                            = 0
8628:   open("/usr/share/lib/zoneinfo/EET", O_RDONLY)   = 7
8628:   read(7, "\0\0\0\0\0\0\0\0\0\0\0\0".., 8192)     = 682
8628:   close(7)                                        = 0
8628:   read(4, " e x t e r n a l\n r c v".., 8188)     = 8188
8628:   read(4, " ! ! ! ! ! ! ! ! ! ! ! !".., 8188)     = 2117
8628:   llseek(4, 0, SEEK_CUR)                          = 10305
8628:       Incurred fault #6, FLTBOUNDS  %pc = 0x000A5638
8628:         siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
8628:       Received signal #11, SIGSEGV [default]
8628:         siginfo: SIGSEGV SEGV_MAPERR addr=0x00000000
8628:           *** process killed ***

Envelope of that message:

---8<---
external
rcvdfrom tonto.eunet.fi ([212.226.249.2]:38197 "EHLO personal.eunet.fi" smtp-aut
h: <none> TLS-CIPHER: <none> TLS-CCERT: <none>)
with ESMTP
identinfo NO-IDENT-SERVICE[2]
from <First.Last@host.sub.domain>
todsn ORCPT=rfc822;etu.suku@utu.fi
to <etu.suku@utu.fi>
env-end
--->8---

-- 
#! /usr/bin/perl -- Eino Tuominen, eino@utu.fi
("1-2-1-2---1-1-1---2--1---1-4-6--4-1--1---2--1----1---1-3--1-4--2-1-1---2-".
"3-6-1-5--2-1-1---2-2--1--4-6--1-4--4-1--3--1--1-1--1--2-1-1---2-")=~//;while
($'=~m$.$){($&ne"-")?$}.="0"x$&:($}.=1)}{*_=\$#}${_}=pack"B192",$};print time