From owner-freebsd-bugs  Mon Jan 15 12:22:19 1996
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id MAA05641
          for bugs-outgoing; Mon, 15 Jan 1996 12:22:19 -0800 (PST)
Received: from birk04.studby.uio.no (birk04.studby.uio.no [129.240.214.13])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id MAA05636
          for <freebsd-bugs@freebsd.org>; Mon, 15 Jan 1996 12:22:17 -0800 (PST)
Received: (from aagero@localhost) by birk04.studby.uio.no (8.7.3/Himkok) id VAA06249; Mon, 15 Jan 1996 21:22:08 +0100 (MET)
Date: Mon, 15 Jan 1996 21:22:08 +0100 (MET)
Message-Id: <199601152022.VAA06249@birk04.studby.uio.no>
From: Åge Røbekk <aagero@aage.aage.priv.no>
To: freebsd-bugs@freebsd.org
Subject: host segfaults on empty host statement
MIME-Version: 1.0
Sender: owner-bugs@freebsd.org
Precedence: bulk


$ /usr/bin/host -t hinfo
Segmentation fault (core dumped)

The problem is that the argument after hinfo is not checked for a NULL
pointer. In line 220 of host.c, strcmp(v[1], ".") fails due to
dereferencing the NULL pointer v[1]. v[1] is the argument that follows
the type query. I also checked host.c in 4.9.3-REL and the problem is
still present there.

-aage