Yes. I can't try it on Dapper but looking at Dapper's nn-6.7.2 source I
see they've altered the code to initialise stp to NULL but it still
doesn't get set to anything useful unless the while-loop body is
executed at least once. Despite this, after the while-loop the code
does `stp->n.next = NULL;' which dereferences a NULL pointer. Kaboom!
** Changed in: nn (Ubuntu)
Status: Needs Info => Confirmed
--
nn suffers segv after empty NNTP LIST reply from sn.
https://launchpad.net/bugs/1286
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
