[Pkg-mutt-maintainers] Bug#819196: mutt segfaults on scoring with ~X

[Antonio Radici]

Control: tag -1 +pending

On Thu, Mar 24, 2016 at 07:06:47PM +0100, Francesco Ariis wrote:
> Package: mutt
> Version: 1.5.23-3
> Severity: normal
> 
> Dear Maintainer,
> 
> open your .muttrc, paste this line
> 
>     score "~X >1" -60
> 
> save, load mutt, enter any folder, mutt crashes with
> 
>     Reading /home/user/mailfolder/folder... 0/438 (0%)Segmentation fault
> 
> Note that this pattern only crashes if used in a scoring rule (i.e.
> you can use ~X in a 'limit' pattern).
> 

backtrace FTR:

mx_open_message (ctx=ctx at entry=0x0, msgno=0) at ../../mx.c:1440
1440      if (!ctx->mx_ops->open_msg)
(gdb) bt
#0  mx_open_message (ctx=ctx at entry=0x0, msgno=0) at ../../mx.c:1440
#1  0x00005555555c27eb in mutt_parse_mime_message (ctx=0x0, cur=0x555555f08b40) at ../../parse.c:965
#2  0x00005555555c29b5 in mutt_count_body_parts (ctx=<optimized out>, hdr=0x555555f08b40) at ../../parse.c:1740
#3  0x00005555555c4d6b in mutt_pattern_exec (pat=0x5555559f9e20, flags=MUTT_MATCH_FULL_ADDRESS, ctx=0x0, h=0x555555f08b40) at ../../pattern.c:1290
#4  0x00005555555d3b33 in mutt_score_message (ctx=ctx at entry=0x5555559d2d60, hdr=hdr at entry=0x555555f08b40, upd_ctx=upd_ctx at entry=0) at ../../score.c:136
#5  0x00005555555b7735 in mx_update_context (ctx=ctx at entry=0x5555559d2d60, new_messages=<optimized out>) at ../../mx.c:1572
#6  0x000055555562cfc5 in imap_read_headers (idata=0x5555559df780, msgbegin=5220, msgend=5219) at ../../../imap/message.c:379
#7  0x0000555555629f29 in imap_open_mailbox (ctx=0x5555559d2d60) at ../../../imap/imap.c:755
#8  0x00005555555b57b0 in mx_open_mailbox (path=<optimized out>, flags=0, pctx=0x0) at ../../mx.c:679
#9  0x000055555556d2d9 in main (argc=1, argv=<optimized out>) at ../../main.c:869
(gdb)