Bug#330921: bld-postfix: Possible core dump

[Oleg Milaenko]

Package: bld-postfix
Version: 0.3.2-3
Severity: important
Tags: patch


Possible core dump

-- System Information:
Debian Release: 3.1
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.12
Locale: LANG=ru_RU.KOI8-R, LC_CTYPE=ru_RU.KOI8-R (charmap=KOI8-R)

Versions of packages bld-postfix depends on:
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  postfix                     2.2.4-1.tlc1 A high-performance mail transport 

-- no debconf information

--- bld-0.3.2.orig/postfix_policy.c
+++ bld-0.3.2/postfix_policy.c
@@ -120,7 +120,7 @@
     } else if (buf[0] == '\n') {
       char *action = "dunno";
       
-      if (!inet_aton(ip, &inp))
+      if (!ip || !inet_aton(ip, &inp))
 	syslog(LOG_ERR, "invalid IP address: %s", ip);
       else
 	action = bld_query(host, port, ip);
@@ -128,9 +128,9 @@
       printf("action=%s\n\n", action);
       fflush(stdout);
       if (verbose)
-	syslog(LOG_INFO, "%s: %s", ip, action);
+	syslog(LOG_INFO, "%s: %s", ip ? ip : "(null)", action);
       
-      free(ip);
+      if(ip) free(ip);
     }
   }