Xref: utzoo comp.bugs.4bsd:1243 comp.mail.sendmail:639
Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!csd4.milw.wisc.edu!lll-winken!uunet!mcvax!ukc!warwick!cudcv
From: cudcv@warwick.ac.uk (Rob McMahon)
Newsgroups: comp.bugs.4bsd,comp.mail.sendmail
Subject: IDA - Sendmail 5.61 - Null pointer dereference in savemail.c
Message-ID: <131@titania.warwick.ac.uk>
Date: 25 Mar 89 16:13:37 GMT
Reply-To: cudcv@warwick.ac.uk (Rob McMahon)
Organization: Computing Services, Warwick University, UK
Lines: 32

Sendmail 5.61 with the IDA 1.2.5 patches tries to dereference a null pointer
if PostMasterCopy is null.

RCS file: savemail.c,v
retrieving revision 1.1
retrieving revision 1.2
diff -c -r1.1 -r1.2
*** /tmp/,RCSt1a08470	Sat Mar 25 16:11:16 1989
--- /tmp/,RCSt2a08470	Sat Mar 25 16:11:17 1989
***************
*** 406,412 ****
  	to = buf;
  	for (q = returnq; q != NULL; q = q->q_next) {
  	    if (q->q_alias == NULL)
! 		if (strcmp(q->q_paddr, PostMasterCopy) == 0)
  		    cc = q->q_paddr;
  		else {
  		    /* Not Postmaster; already on the To: line? */
--- 406,412 ----
  	to = buf;
  	for (q = returnq; q != NULL; q = q->q_next) {
  	    if (q->q_alias == NULL)
! 		if (PostMasterCopy && strcmp(q->q_paddr, PostMasterCopy) == 0)
  		    cc = q->q_paddr;
  		else {
  		    /* Not Postmaster; already on the To: line? */

Rob
-- 
UUCP:   ...!mcvax!ukc!warwick!cudcv	PHONE:  +44 203 523037
JANET:  cudcv@uk.ac.warwick             ARPA:   cudcv@warwick.ac.uk
Rob McMahon, Computing Services, Warwick University, Coventry CV4 7AL, England