From owner-freebsd-bugs  Wed Jun  5 18:10: 6 2002
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 2A77F37B405
	for <freebsd-bugs@hub.freebsd.org>; Wed,  5 Jun 2002 18:10:03 -0700 (PDT)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g561A3Z06562;
	Wed, 5 Jun 2002 18:10:03 -0700 (PDT)
	(envelope-from gnats)
Date: Wed, 5 Jun 2002 18:10:03 -0700 (PDT)
Message-Id: <200206060110.g561A3Z06562@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
Cc: 
From: Bruce Evans <bde@zeta.org.au>
Subject: Re: misc/38884: bug in vfprinf.c function cvt(...)
Reply-To: Bruce Evans <bde@zeta.org.au>
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-bugs.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-bugs>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-bugs>
X-Loop: FreeBSD.org

The following reply was made to PR misc/38884; it has been noted by GNATS.

From: Bruce Evans <bde@zeta.org.au>
To: Igor Roboul <igorr@speechpro.com>
Cc: FreeBSD-gnats-submit@FreeBSD.ORG
Subject: Re: misc/38884: bug in vfprinf.c function cvt(...)
Date: Thu, 6 Jun 2002 11:09:51 +1000 (EST)

 On Tue, 4 Jun 2002, Igor Roboul wrote:
 
 > >Description:
 > Function cvt(double value, int ndigits, int flags, char *sign, int *decpt,
 >     int ch, int *length, char **dtoaresultp) in vfprintf.c does not
 > check return value of __dtoa(...) for NaN or Infinity value. Because
 > of this mutt (mail program from ports) sometimes crashes with Sig 10 in
 > vfprintf when showing list of attachments or after exitiong from editor when
 > composing new message.
 >
 > >How-To-Repeat:
 > Launch mutt. Then open some mail with attachments, then try get list of
 > attachments (press 'v'). Sometimes, really often, mutt crashes with Signal 10.
 > Same result you can get if you try send new message.
 
 Can you give some formats and numbers which cause this crash?  Infs and
 NaNs are handled specially after detecting them using isinf() and isnan(),
 so __dtoa() should not even be called for them.
 
 Bruce
 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message