[Pkg-silc-devel] Bug#482145: silc segfaults if i delay accepting a server's key until after the server drops the connection

[Daniel Kahn Gillmor]

Package: silc
Version: 1.1.4-1+b1
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Using the regular silc client (built as a standalone, not with the
irssi plugin), if i connect to a new server, the server's fingerprint
is presented to me, with the "minibuffer" reading "Would you like to
accept the key (y/n)?"

If i wait a minute or two, the server will drop the connection.  If i
then go ahead and choose "y", i get a segmentation fault.

     --dkg

- -- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.24-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages silc depends on:
ii  libc6                     2.7-10         GNU C Library: Shared libraries
ii  libglib2.0-0              2.16.3-2       The GLib library of C routines
ii  libncurses5               5.6+20080308-1 Shared libraries for terminal hand
ii  libsilc-1.1-2             1.1.7-1        SILC library (silc-toolkit)

silc recommends no packages.

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
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=Y+HO
-----END PGP SIGNATURE-----